Package com.evolveum.midpoint.model.impl.security

Class SecurityHelper

java.lang.Object

com.evolveum.midpoint.model.impl.security.SecurityHelper

All Implemented Interfaces:

ModelAuditRecorder

@Component
public class SecurityHelper
extends Object
implements ModelAuditRecorder

Author:

semancik

Constructor Summary

Constructors

Constructor	Description
SecurityHelper()

Method Summary

Modifier and Type	Method	Description
void	auditLoginFailure(@Nullable String username, @Nullable FocusType focus, @NotNull ConnectionEnvironment connEnv, String message)
void	auditLoginSuccess(@NotNull FocusType user, @NotNull ConnectionEnvironment connEnv)
void	auditLoginSuccess(@NotNull NodeType node, @NotNull ConnectionEnvironment connEnv)
void	auditLogout(ConnectionEnvironment connEnv, Task task, OperationResult result)
SecurityEnforcer	getSecurityEnforcer()
boolean	isAuthorized(List<String> actions, Task task, OperationResult result)
<F extends FocusType> SecurityPolicyType	locateGlobalSecurityPolicy(PrismObject<F> focus, PrismObject<SystemConfigurationType> systemConfiguration, Task task, OperationResult result)
SecurityPolicyType	locateProjectionSecurityPolicy(ResourceObjectDefinition structuralObjectClassDefinition, Task task, OperationResult result)
<F extends FocusType> SecurityPolicyType	locateSecurityPolicy(PrismObject<F> focus, PrismObject<SystemConfigurationType> systemConfiguration, Task task, OperationResult result)	Returns security policy applicable for the specified user.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SecurityHelper

public SecurityHelper()

Method Detail

auditLoginSuccess

public void auditLoginSuccess(@NotNull
                              @NotNull FocusType user,
                              @NotNull
                              @NotNull ConnectionEnvironment connEnv)

Specified by:

auditLoginSuccess in interface ModelAuditRecorder

auditLoginSuccess

public void auditLoginSuccess(@NotNull
                              @NotNull NodeType node,
                              @NotNull
                              @NotNull ConnectionEnvironment connEnv)

Specified by:

auditLoginSuccess in interface ModelAuditRecorder

auditLoginFailure

public void auditLoginFailure(@Nullable
                              @Nullable String username,
                              @Nullable
                              @Nullable FocusType focus,
                              @NotNull
                              @NotNull ConnectionEnvironment connEnv,
                              String message)

Specified by:

auditLoginFailure in interface ModelAuditRecorder

auditLogout

public void auditLogout(ConnectionEnvironment connEnv,
                        Task task,
                        OperationResult result)

Specified by:

auditLogout in interface ModelAuditRecorder

locateSecurityPolicy

public <F extends FocusType> SecurityPolicyType locateSecurityPolicy(PrismObject<F> focus,
                                                                     PrismObject<SystemConfigurationType> systemConfiguration,
                                                                     Task task,
                                                                     OperationResult result)
                                                              throws SchemaException,
                                                                     CommunicationException,
                                                                     ConfigurationException,
                                                                     SecurityViolationException,
                                                                     ExpressionEvaluationException

Returns security policy applicable for the specified user. It looks for organization and global policies and takes into account deprecated properties and password policy references. The resulting security policy has all the (non-deprecated) properties set. If there is also referenced value policy, it is will be stored as "object" in the value policy reference inside the returned security policy.

Throws:

SchemaException

CommunicationException

ConfigurationException

SecurityViolationException

ExpressionEvaluationException

locateGlobalSecurityPolicy

public <F extends FocusType> SecurityPolicyType locateGlobalSecurityPolicy(PrismObject<F> focus,
                                                                           PrismObject<SystemConfigurationType> systemConfiguration,
                                                                           Task task,
                                                                           OperationResult result)
                                                                    throws CommunicationException,
                                                                           ConfigurationException,
                                                                           SecurityViolationException,
                                                                           ExpressionEvaluationException

Throws:

CommunicationException

ConfigurationException

SecurityViolationException

ExpressionEvaluationException

locateProjectionSecurityPolicy

public SecurityPolicyType locateProjectionSecurityPolicy(ResourceObjectDefinition structuralObjectClassDefinition,
                                                         Task task,
                                                         OperationResult result)
                                                  throws SchemaException,
                                                         ObjectNotFoundException,
                                                         SecurityViolationException,
                                                         CommunicationException,
                                                         ConfigurationException,
                                                         ExpressionEvaluationException

Throws:

SchemaException

ObjectNotFoundException

SecurityViolationException

CommunicationException

ConfigurationException

ExpressionEvaluationException

getSecurityEnforcer

public SecurityEnforcer getSecurityEnforcer()

isAuthorized

public boolean isAuthorized(List<String> actions,
                            Task task,
                            OperationResult result)