|
||||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | |||||||||
SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |
public interface ImmutableAclEntry
This important interface is responsible for modeling an access control entry which manages some access rights or some access restrictions from an eligible party to a resource. An AclEntry is external if its eligible party or its resource is from an ACS which is not the ACS of the AclEntry. It is possible to have a third ACS for the other end. It is not possible to have the same ACS for the two ends and another ACS for the ACL. For an internal ACL, the ACL ACS is the ACS of the two ends. An AclEntry is conditional when it uses some condition group(s). There are two types of conditional AclEntry, the simple-condition (or flexible) ACL and the right-condition ACL. A conditional ACL is for a GroupIDMember or an Actor (new in 0.7.1) as source. An external ACL may be conditional. Then, it cannot have more than one condition group, and this group has to belong to the ACS of one of the two ends (that is not always the ACL ACS). A resource in an ACS addon may inherit the ACL of its (in)direct parent(s), following the inheritance rules of the ACS addon.
The AclEntry is an alternative to the Privilege, but it allows the change of its rights while the Privilege cannot do it. The conditional AclEntry is an alternative to the LINKED_IF_ALL_SOURCES privilege, but it is focused to deliver rights to one source which has to be member of the condition groups.
The form of the detailled name for an internal ACL is:
- incomplete Eligible Party name >> incomplete Resource name || grant OR deny || first condition group last component.
For an external ACL, the form of the detailled name is:
- ACS: ACS_name | (full or incomplete) Eligible Party name >> (full or incomplete) Resource name || grant OR deny || <Source ACS group> OR <Target ACS group> || first condition group last component.
An Eligible Party or Resource name is incomplete if it belongs to the AclEntry ACS. The condition group is put in the name or the detailled name only for a flexible conditional AclEntry. '<XXXX ACS group>' is used only for an external ACL, when the condition group belongs to the XXXX ACS.
It is a javabean with the following bound properties: 'Comment', 'AclRights', 'ConditionSourceGroups'.
EligibleParty
,
Resource
Method Summary | |
---|---|
java.lang.Object |
clone()
Used by ACS.closeAclEntriesTo() when the links to other ACS have to be cut and cloned. |
AclEntry |
copy(Resource _newRes)
Copy the AclEntry for a resource of the same ACS. |
boolean |
equals(java.lang.Object _obj)
|
boolean |
getEnabledRights()
Gets false only for a conditional AclEntry where the GroupIDMember source is not (in)direct member of a condition group. |
ImmutableACS |
getEorACS()
|
ImmutableEligibleParty |
getEorEP()
|
ImmutableACS |
getEorResACS()
|
ImmutableResource |
getEorResource()
|
ImmutableName |
getEpName()
Caution: does not return a clone. |
java.util.List<ImmutableGroupID> |
getL_ConditionSourceGroups()
To activate the ACL rights in a conditional AclEntry, the EP, if it is a groupmember, has to be member of each conditional GroupID. |
StringRight[] |
getL_Rights()
Gets the effective rights for the eligible party upon the resource. |
ImmutableName |
getNameOfEpACS()
Caution: does not return a clone. |
ImmutableName |
getNameOfResACS()
Caution: does not return a clone. |
StringRight[] |
getNoConditionalRight()
Gets the list of the internal conditional or no-conditional rights for the eligible party upon the resource, whatever the compliance to the conditions if there are some conditional groups. |
boolean |
getPositiveRight()
|
java.beans.PropertyChangeListener[] |
getPropertyChangeListeners(java.lang.String _propertyName)
Returns the change listeners for a property. |
ImmutableName |
getResName()
Caution: does not return a clone. |
java.lang.String |
getResType()
To use when it is possible to replace getEorResource(). |
long |
getSerialVersionUID()
|
java.lang.String |
getSource()
Gets the access source displayed in the beamer. |
java.lang.String |
getTarget()
Gets the access target displayed in the beamer. |
int |
hashCode()
|
boolean |
isConditionalAclEntry()
Gets true for a right-defined or a flexible conditional AclEntry. |
boolean |
isEmpty()
|
boolean |
isExternalAclEntry()
An external ACL has the source or the target from another ACS than the ACL ACS. |
boolean |
isRightDefinedConditionalAclEntry()
Gets true for a right-defined conditional AclEntry. |
java.lang.String |
toString()
The String presentation of the AclEntry |
Methods inherited from interface ARoad0.gBaseInterface.ACSObject |
---|
getAcsName |
Methods inherited from interface ARoad0.gBaseInterface.BaseObject |
---|
getFullName, getName, getNickName |
Methods inherited from interface ARoad0.gBaseInterface.DetailledName |
---|
getDetailledName, getDetailledNameFromName, getKeyPropertiesFromDetailledName, getNameFromDetailledName |
Methods inherited from interface ARoad0.gBaseInterface.FinalizedObjectForUser |
---|
finalizeForUser |
Methods inherited from interface ARoad0.gBaseInterface.FinalizedObject |
---|
finalizeForBase |
Methods inherited from interface java.lang.Comparable |
---|
compareTo |
Method Detail |
---|
java.lang.String getSource()
java.lang.String getTarget()
boolean isEmpty()
ImmutableResource getEorResource()
ImmutableEligibleParty getEorEP()
StringRight[] getL_Rights()
StringRight[] getNoConditionalRight()
ImmutableACS getEorACS()
getEorACS
in interface ACSObject
ImmutableACS getEorResACS()
boolean getPositiveRight()
ImmutableName getEpName()
ImmutableName getResName()
java.lang.String getResType()
ImmutableName getNameOfEpACS()
ImmutableName getNameOfResACS()
java.util.List<ImmutableGroupID> getL_ConditionSourceGroups()
boolean isRightDefinedConditionalAclEntry()
boolean isConditionalAclEntry()
boolean isExternalAclEntry()
boolean getEnabledRights()
java.beans.PropertyChangeListener[] getPropertyChangeListeners(java.lang.String _propertyName)
_propertyName
- name of the listened property.
java.lang.Object clone()
AclEntry copy(Resource _newRes) throws CreateError
_newRes
- is a resource belonging to the same ACS
java.lang.InternalError
- if _newRes is null.
CreateError
- if _ep is already recorded in this resource
with the same ACS and sens, or thrown by the ACS.newEorAclEntry().boolean equals(java.lang.Object _obj)
equals
in interface BaseObject
equals
in class java.lang.Object
_obj
- is an Object to compare
int hashCode()
hashCode
in interface BaseObject
hashCode
in class java.lang.Object
long getSerialVersionUID()
java.lang.String toString()
toString
in class java.lang.Object
|
||||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | |||||||||
SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |