|
|||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | ||||||||
SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |
public interface Authorizer
This class Authorizer
is an interface for identity service
to check authorization of a WSC
.
Field Summary | |
---|---|
static String |
AUTH_TYPE
Key of a parameter Map which contains information useful for policy evaluation. |
static String |
MESSAGE
Key of a parameter Map which contains information useful for policy evaluation. |
static String |
USER_ID
Key of a parameter Map which contains information useful for policy evaluation. |
Method Summary | |
---|---|
Object |
getAuthorizationDecision(Object credential,
String action,
Object data,
Map env)
Returns authorization decision for the given action(query or modify) and to the given select data |
boolean |
isAuthorized(Object credential,
String action,
Object data,
Map env)
Checks if the WSC is authorized to query or modify the
select data. |
Field Detail |
---|
static final String USER_ID
static final String AUTH_TYPE
static final String MESSAGE
com.sun.identity.liberty.ws.soapbinding.Message
.
Method Detail |
---|
boolean isAuthorized(Object credential, String action, Object data, Map env)
WSC
is authorized to query or modify the
select data.
credential
- credential of a WSC
.action
- request action.data
- Object who is being accessed.env
- A Map contains information useful for policy evaluation.
The following key is defined and its value should be
passed in:
Key: USER_ID
Value: id of the user whose resource is being accessed.
Key: AUTH_TYPE
Value: The authentication mechanism WSC
used.
Key: MESSAGE
Value:
com.sun.identity.liberty.ws.soapbinding.Message
.
WSC
is authorized.Object getAuthorizationDecision(Object credential, String action, Object data, Map env)
credential
- credential of a WSC
.action
- request action.data
- Object who is being accessed.env
- A Map contains information useful for policy evaluation.
The following key is defined and its value should be passed in:
Key: USER_ID
Value: id of the user whose resource is being accessed.
Key: AUTH_TYPE
Value: The authentication mechanism WSC
used.
Key: MESSAGE
Value:
com.sun.identity.liberty.ws.soapbinding.Message
.
AuthorizationDecision
object contains authorization
decision information for the given resource.
Exception
|
|||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | ||||||||
SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |