Skip navigation links

Oracle BPEL Process Manager Client Java API Reference
10g Release 3 (10.1.3.1.0)

B28986-01


com.oracle.bpel.security
Class ACLManager

java.lang.Object
  extended by com.oracle.bpel.security.util.SecurityUtils
      extended by com.oracle.bpel.security.BaseACLManager
          extended by com.oracle.bpel.security.ACLManager


public abstract class ACLManager
extends com.oracle.bpel.security.BaseACLManager

Public abstract class that has to be implemented for having a valid ACLManager that is used by the BPEL server for authentication & authorization This is the class that needs to be extended for a custom validator implementation later to be used within the security interceptor framework. (configuration can be found in message-handlers.xml)


Constructor Summary
ACLManager()
          Public constructor that should use a cache for connections and care about other stuff.

 

Method Summary
abstract  boolean isAllowedToExecuteActivity(BPELProcessId pProcessID, NormalizedMessage pMessage, java.lang.String pActivityName)
          Checks if a user is allowed to execute (=invoke) a certain activity of a process.
abstract  boolean isAllowedToExecuteProcess(BPELProcessId pProcessID, NormalizedMessage pMessage)
          Checks if a user is allowed to execute (=invoke) a certain revision (if given) of a process.
abstract  boolean isAllowedToLookupActivity(BPELProcessId pProcessID, NormalizedMessage pMessage, java.lang.String pActivityName)
          Checks if a user is allowed to lookup a certain activity of a process.
abstract  boolean isAllowedToLookupProcess(BPELProcessId pProcessID, NormalizedMessage pMessage)
          Checks if a user is allowed to lookup a certain revision (if given) of a process.
abstract  boolean validateUser(BPELProcessId pProcessID, NormalizedMessage pMessage)
          Checks if a user is valid in the context of a secured Process

 

Methods inherited from class com.oracle.bpel.security.BaseACLManager
getValidatorDescription, getValidatorName, releaseResources

 

Methods inherited from class com.oracle.bpel.security.util.SecurityUtils
constructSubject, constructSubject, getPrincipalFromSubject

 

Methods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

 

Constructor Detail

ACLManager

public ACLManager()
           throws ServerException
Public constructor that should use a cache for connections and care about other stuff.
Throws:
ServerException
Since:
1.0

Method Detail

validateUser

public abstract boolean validateUser(BPELProcessId pProcessID,
                                     NormalizedMessage pMessage)
                              throws ServerException
Checks if a user is valid in the context of a secured Process
Parameters:
pMessage - the message will hold all information, including the domain information and headers
Returns:
valid or not
Throws:
ServerException - in case something breaks

isAllowedToExecuteProcess

public abstract boolean isAllowedToExecuteProcess(BPELProcessId pProcessID,
                                                  NormalizedMessage pMessage)
                                           throws ServerException
Checks if a user is allowed to execute (=invoke) a certain revision (if given) of a process.
Parameters:
pProcessId - the name, domain and revision of the process
pMessage - the message will hold all information, including the domain information and headers
Returns:
true if he is otherwise false
Throws:
ServerException - in case something breaks

isAllowedToExecuteActivity

public abstract boolean isAllowedToExecuteActivity(BPELProcessId pProcessID,
                                                   NormalizedMessage pMessage,
                                                   java.lang.String pActivityName)
                                            throws ServerException
Checks if a user is allowed to execute (=invoke) a certain activity of a process.
Parameters:
pProcessId - the name, domain and revision of the process
pActivityName - the name of the Activity
pMessage - the message will hold all information, including the domain information and headers
Returns:
true if he is otherwise false
Throws:
ServerException - in case something breaks

isAllowedToLookupProcess

public abstract boolean isAllowedToLookupProcess(BPELProcessId pProcessID,
                                                 NormalizedMessage pMessage)
                                          throws ServerException
Checks if a user is allowed to lookup a certain revision (if given) of a process.
Parameters:
pMessage - the message will hold all information, including the domain information and headers
pProcessId - the name, domain and revision of the process
Returns:
true if he is otherwise false
Throws:
ServerException - in case something breaks

isAllowedToLookupActivity

public abstract boolean isAllowedToLookupActivity(BPELProcessId pProcessID,
                                                  NormalizedMessage pMessage,
                                                  java.lang.String pActivityName)
                                           throws ServerException
Checks if a user is allowed to lookup a certain activity of a process.
Parameters:
pActivityName - the name of the Activity
pProcessId - the name, domain and revision of the process
Returns:
true if he is otherwise false
Throws:
ServerException - in case something breaks

Skip navigation links

Oracle BPEL Process Manager Client Java API Reference
10g Release 3 (10.1.3.1.0)

B28986-01


Copyright © 2006, Oracle. All rights reserved.