|
Oracle Fusion Middleware extensions for Applications Core API Reference 11g Release 1 (11.1.1.6) E22562-03 |
|||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | |||||||||
SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |
java.lang.Object oracle.apps.fnd.applcore.audit.model.utility.AuditSecurity
public class AuditSecurity
This is a class that uses FND Data Security to secure the resources that have been tagged. Implementers of this class can if need override method getDataSecurityObjectName(). In addition, if need be they can override the default implementation of getPrimaryKey(String primaryKey), getPrivilegeName(String primaryKey) and getCompositePrimaryKeySeparator(String primaryKey) methods. This class uses DataSecurityAM instance to do Data Security checks of the resources being secured. It has to be noted that the lifecycle of the DataSecurityAM is the same as the lifecycle of the DBTransaction instance returned by getDBTransaction() concrete method, that needs to be implemnted by the developer. The default implementation of getPrimaryKey(String primaryKey) assumes that the primaryKey represents the primary key of the object and if it holds a composite primary key, the elements of the key are separated by ".". The default implementation of getPrivilegeName(String primaryKey) assumes that the "read" privilege is used to secure the resource. The default implementation of getCompositePrimaryKeySeparator(primaryKey) assumes that the seperator is ".". This class can also do Function Security check if needed. This requires that the following 3 methods be overloaded. getFSPermissionName(), getFSPermissionAction() and getFSPermissionClass(). The default implementation returns null and no function security check is done. getFSPermissionName() - should provide the name of the permission to check. ex PURCHASE_ORDER_REGION getFSPermissionAction() - should provide the action for the permission, e.g. view, invoke etc. getFSPermissionClass() - should provide the class name that implements the permission, etc. RegionPermission, MethodPermission, or TaskflowPermission For function security check to work, this class requires a code permission grant.
Constructor Summary | |
---|---|
AuditSecurity()
|
Method Summary | |
---|---|
static boolean |
checkPermission(java.security.Permission functionPerm)
|
java.lang.String |
getCompositePrimaryKeySeparator(java.lang.String primaryKey)
The separator used to separate the different parts of the composite primary key, which is concatenated together in primaryKey. |
java.util.List<java.lang.String> |
getDataSecuredPKList(java.util.List<java.lang.String> primaryKey,
java.lang.String objName)
|
java.lang.String |
getDataSecurityObjectName()
|
java.lang.String |
getDataSecurityObjectName(java.lang.String primaryKey)
Gives the name of the object that is secured as defined in FND Data Security system. |
java.lang.String |
getDataSecurityPrivilegeName()
|
oracle.jbo.server.DBTransaction |
getDBTransaction()
Provides a DBTransaction instance that can be used to create a Data Security AM instance that can be used to test tag resource security. |
java.lang.String |
getFSPermissionAction()
Provides the action for the permission, e.g. |
java.lang.String |
getFSPermissionClass()
provide the class name that implements the permission, etc. |
java.lang.String |
getFSPermissionName()
Provides the name of the permission to check. |
java.lang.String |
getPrivilegeName(java.lang.String primaryKey)
The privilege name to use to secure the tags. |
DataSecurityAMImpl |
getSecurityAM()
Deprecated. |
void |
setDataSecurityObjectName(java.lang.String dataSecurityObjectName)
|
void |
setDataSecurityPrivilegeName(java.lang.String dataSecurityPrivilegeName)
|
Methods inherited from class java.lang.Object |
---|
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait |
Constructor Detail |
---|
public AuditSecurity()
Method Detail |
---|
public java.util.List<java.lang.String> getDataSecuredPKList(java.util.List<java.lang.String> primaryKey, java.lang.String objName)
public DataSecurityAMImpl getSecurityAM()
getDBTransaction()
,
getSecurityAMInternal
public java.lang.String getPrivilegeName(java.lang.String primaryKey)
public java.lang.String getCompositePrimaryKeySeparator(java.lang.String primaryKey)
primaryKey
-
public java.lang.String getFSPermissionName()
public java.lang.String getFSPermissionAction()
public java.lang.String getFSPermissionClass()
public static boolean checkPermission(java.security.Permission functionPerm)
public java.lang.String getDataSecurityObjectName(java.lang.String primaryKey)
primaryKey
-
public void setDataSecurityObjectName(java.lang.String dataSecurityObjectName)
public java.lang.String getDataSecurityObjectName()
public void setDataSecurityPrivilegeName(java.lang.String dataSecurityPrivilegeName)
public java.lang.String getDataSecurityPrivilegeName()
public oracle.jbo.server.DBTransaction getDBTransaction()
|
Oracle Fusion Middleware extensions for Applications Core API Reference 11g Release 1 (11.1.1.6) E22562-03 |
|||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | |||||||||
SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |