org.apache.directory.server.core.authz

Class AciAuthorizationInterceptor

java.lang.Object

org.apache.directory.server.core.interceptor.BaseInterceptor

org.apache.directory.server.core.authz.AciAuthorizationInterceptor

All Implemented Interfaces:

Interceptor

public class AciAuthorizationInterceptor
extends BaseInterceptor

An ACI based authorization service.

Version:

$Rev: 928938 $

Author:

Apache Directory Project

Field Summary

Fields

Modifier and Type	Field and Description
static SearchControls	DEFAULT_SEARCH_CONTROLS

Constructor Summary

Constructors

Constructor and Description
AciAuthorizationInterceptor()

Method Summary

Modifier and Type	Method and Description
void	add(NextInterceptor next, AddOperationContext addContext) Filters Partition.add( AddOperationContext ) call.
void	cacheNewGroup(org.apache.directory.shared.ldap.name.DN name, org.apache.directory.shared.ldap.entry.ServerEntry entry)
boolean	compare(NextInterceptor next, CompareOperationContext opContext) Filters DefaultPartitionNexus#compare( CompareOperationContext ) call.
void	delete(NextInterceptor next, DeleteOperationContext deleteContext) Filters Partition.delete( DeleteOperationContext ) call.
org.apache.directory.shared.ldap.name.DN	getMatchedName(NextInterceptor next, GetMatchedNameOperationContext opContext) Filters DefaultPartitionNexus#getMatchedName( GetMatchedNameOperationContext ) call.
boolean	hasEntry(NextInterceptor next, EntryOperationContext entryContext) Filters Partition.hasEntry( EntryOperationContext ) call.
void	init(DirectoryService directoryService) Initializes this interceptor based service by getting a handle on the nexus, setting up the tupe and group membership caches and the ACIItem parser and the ACDF engine.
boolean	isPrincipalAnAdministrator(org.apache.directory.shared.ldap.name.DN principalDn)
EntryFilteringCursor	list(NextInterceptor next, ListOperationContext opContext) Filters Partition.list( ListOperationContext ) call.
ClonedServerEntry	lookup(NextInterceptor next, LookupOperationContext lookupContext) Filters Partition.lookup( LookupOperationContext ) call.
void	modify(NextInterceptor next, ModifyOperationContext opContext) Filters Partition.modify( ModifyOperationContext ) call.
void	move(NextInterceptor next, MoveOperationContext moveContext) Filters Partition.move( MoveOperationContext ) call.
void	moveAndRename(NextInterceptor next, MoveAndRenameOperationContext moveAndRenameContext) Filters Partition.moveAndRename( MoveAndRenameOperationContext) call.
void	rename(NextInterceptor next, RenameOperationContext renameContext) Filters Partition.rename( RenameOperationContext ) call.
EntryFilteringCursor	search(NextInterceptor next, SearchOperationContext opContext) Filters Partition.search( SearchOperationContext ) call.

Methods inherited from class org.apache.directory.server.core.interceptor.BaseInterceptor

addContextPartition, bind, destroy, getContext, getName, getPrincipal, getRootDSE, getSuffix, listSuffixes, removeContextPartition, unbind

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

DEFAULT_SEARCH_CONTROLS

public static final SearchControls DEFAULT_SEARCH_CONTROLS

Constructor Detail

AciAuthorizationInterceptor

public AciAuthorizationInterceptor()

Method Detail

init

public void init(DirectoryService directoryService)
          throws Exception

Initializes this interceptor based service by getting a handle on the nexus, setting up the tupe and group membership caches and the ACIItem parser and the ACDF engine.

Specified by:

init in interface Interceptor

Overrides:

init in class BaseInterceptor

Parameters:

directoryService - the directory service core

Throws:

Exception - if there are problems during initialization

add

public void add(NextInterceptor next,
                AddOperationContext addContext)
         throws Exception

Description copied from interface: Interceptor

Filters Partition.add( AddOperationContext ) call.

Specified by:

add in interface Interceptor

Overrides:

add in class BaseInterceptor

Throws:

Exception

delete

public void delete(NextInterceptor next,
                   DeleteOperationContext deleteContext)
            throws Exception

Description copied from interface: Interceptor

Filters Partition.delete( DeleteOperationContext ) call.

Specified by:

delete in interface Interceptor

Overrides:

delete in class BaseInterceptor

Throws:

Exception

modify

public void modify(NextInterceptor next,
                   ModifyOperationContext opContext)
            throws Exception

Description copied from interface: Interceptor

Filters Partition.modify( ModifyOperationContext ) call.

Specified by:

modify in interface Interceptor

Overrides:

modify in class BaseInterceptor

Throws:

Exception

hasEntry

public boolean hasEntry(NextInterceptor next,
                        EntryOperationContext entryContext)
                 throws Exception

Description copied from interface: Interceptor

Filters Partition.hasEntry( EntryOperationContext ) call.

Specified by:

hasEntry in interface Interceptor

Overrides:

hasEntry in class BaseInterceptor

Throws:

Exception

lookup

public ClonedServerEntry lookup(NextInterceptor next,
                                LookupOperationContext lookupContext)
                         throws Exception

Description copied from interface: Interceptor

Filters Partition.lookup( LookupOperationContext ) call.

Specified by:

lookup in interface Interceptor

Overrides:

lookup in class BaseInterceptor

Throws:

Exception

rename

public void rename(NextInterceptor next,
                   RenameOperationContext renameContext)
            throws Exception

Description copied from interface: Interceptor

Filters Partition.rename( RenameOperationContext ) call.

Specified by:

rename in interface Interceptor

Overrides:

rename in class BaseInterceptor

Throws:

Exception

moveAndRename

public void moveAndRename(NextInterceptor next,
                          MoveAndRenameOperationContext moveAndRenameContext)
                   throws Exception

Description copied from interface: Interceptor

Filters Partition.moveAndRename( MoveAndRenameOperationContext) call.

Specified by:

moveAndRename in interface Interceptor

Overrides:

moveAndRename in class BaseInterceptor

Throws:

Exception

move

public void move(NextInterceptor next,
                 MoveOperationContext moveContext)
          throws Exception

Description copied from interface: Interceptor

Filters Partition.move( MoveOperationContext ) call.

Specified by:

move in interface Interceptor

Overrides:

move in class BaseInterceptor

Throws:

Exception

list

public EntryFilteringCursor list(NextInterceptor next,
                                 ListOperationContext opContext)
                          throws Exception

Description copied from interface: Interceptor

Filters Partition.list( ListOperationContext ) call.

Specified by:

list in interface Interceptor

Overrides:

list in class BaseInterceptor

Throws:

Exception

search

public EntryFilteringCursor search(NextInterceptor next,
                                   SearchOperationContext opContext)
                            throws Exception

Description copied from interface: Interceptor

Filters Partition.search( SearchOperationContext ) call.

Specified by:

search in interface Interceptor

Overrides:

search in class BaseInterceptor

Throws:

Exception

isPrincipalAnAdministrator

public final boolean isPrincipalAnAdministrator(org.apache.directory.shared.ldap.name.DN principalDn)

compare

public boolean compare(NextInterceptor next,
                       CompareOperationContext opContext)
                throws Exception

Description copied from interface: Interceptor

Filters DefaultPartitionNexus#compare( CompareOperationContext ) call.

Specified by:

compare in interface Interceptor

Overrides:

compare in class BaseInterceptor

Throws:

Exception

getMatchedName

public org.apache.directory.shared.ldap.name.DN getMatchedName(NextInterceptor next,
                                                               GetMatchedNameOperationContext opContext)
                                                        throws Exception

Description copied from interface: Interceptor

Filters DefaultPartitionNexus#getMatchedName( GetMatchedNameOperationContext ) call.

Specified by:

getMatchedName in interface Interceptor

Overrides:

getMatchedName in class BaseInterceptor

Throws:

Exception

cacheNewGroup

public void cacheNewGroup(org.apache.directory.shared.ldap.name.DN name,
                          org.apache.directory.shared.ldap.entry.ServerEntry entry)
                   throws Exception

Throws:

Exception