Skip navigation links

oracle.stellent.ridc.convenience.usersecurity.impl
Class AccessResolverAcl

java.lang.Object
oracle.stellent.ridc.convenience.usersecurity.impl.BinderUtils
oracle.stellent.ridc.convenience.usersecurity.impl.AccessResolverAcl

All Implemented Interfaces:

IAccessResolver

public class AccessResolverAcl

extends BinderUtils

implements IAccessResolver

ACL part of access level

Field Summary

protected CachedDataBinder	m_aliasBinder
protected java.util.Map<java.lang.String,java.util.List<java.lang.String>>	m_aliasCache
protected CSEnvCache	m_csEnvCache
protected IdcContext	m_superuser
protected long	m_timeToLive

Fields inherited from class oracle.stellent.ridc.convenience.usersecurity.impl.BinderUtils

m_log

Constructor Summary

AccessResolverAcl(CSEnvCache csEnvCache, long timeToLive, IdcContext superuser)
The superuser context is used to cache a copy of the Alias list from the content server

Method Summary

void	clearCache() Clear the alias list
protected java.lang.Integer	getAclAccess(java.lang.String name, java.lang.String acl, boolean isAlias) get the acl sequence for this name the general syntax of acl is comma-separated list of tokens, each token begins with a delimiter character, contains the identifier, then contains a left parenthesis followed by a prefix string from "RWDA" for usernames, we use "&" as the delimiter, "@" for aliases.
protected java.util.List<java.lang.String>	getAliasNamesForUser(java.lang.String user, java.lang.String acl)
protected java.util.List<java.lang.String>	getAliasUserList(java.lang.String aliasName) Get the list of usernames that the alias maps to
java.lang.Integer	resolveAccessLevel(DataObject docInfo, DataBinder userBinder) Get the access level or null if no information is available

Methods inherited from class oracle.stellent.ridc.convenience.usersecurity.impl.BinderUtils

getAliasMap, getDocInfo, getDocInfoRows, getServerEnvironment, getUser, getUserPermissions

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

m_csEnvCache

protected CSEnvCache m_csEnvCache

m_aliasCache

protected java.util.Map<java.lang.String,java.util.List<java.lang.String>> m_aliasCache

m_aliasBinder

protected CachedDataBinder m_aliasBinder

m_superuser

protected IdcContext m_superuser

m_timeToLive

protected long m_timeToLive

Constructor Detail

AccessResolverAcl

public AccessResolverAcl(CSEnvCache csEnvCache,
                         long timeToLive,
                         IdcContext superuser)

The superuser context is used to cache a copy of the Alias list from the content server

Parameters:

superuser -

timeToLive -

csEnvCache -

Method Detail

resolveAccessLevel

public java.lang.Integer resolveAccessLevel(DataObject docInfo,
                                            DataBinder userBinder)

Get the access level or null if no information is available

Specified by:

resolveAccessLevel in interface IAccessResolver

Parameters:

docInfo -

userBinder -

Returns:

null or access level

clearCache

public void clearCache()

Clear the alias list

Specified by:

clearCache in interface IAccessResolver

getAliasUserList

protected java.util.List<java.lang.String> getAliasUserList(java.lang.String aliasName)

Get the list of usernames that the alias maps to

Parameters:

aliasName - Alias

Returns:

List of users for that Alias

getAliasNamesForUser

protected java.util.List<java.lang.String> getAliasNamesForUser(java.lang.String user,
                                                                java.lang.String acl)

getAclAccess

protected java.lang.Integer getAclAccess(java.lang.String name,
                                         java.lang.String acl,
                                         boolean isAlias)

get the acl sequence for this name the general syntax of acl is comma-separated list of tokens, each token begins with a delimiter character, contains the identifier, then contains a left parenthesis followed by a prefix string from "RWDA" for usernames, we use "&" as the delimiter, "@" for aliases. for example: "&rpetty(RWDA)" or for multiple: "&rpetty(RWDA),&scelis(R)"

Parameters:

name - alias or user name

acl - see above description

isAlias - so we know if name is a user or alias

Returns:

null if not found, otherwise the access level

Skip navigation links