|
Oracle Fusion Middleware extensions for Applications Core API Reference 11g Release 1 (11.1.2) E22562-02 |
|||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | |||||||||
SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |
java.lang.Object oracle.apps.fnd.applcore.tags.util.FndTagSecurity
public class FndTagSecurity
This is a class that uses FND Data Security to secure the resources that have been tagged. Implementers of this class can if need override method getDataSecurityObjectName(). In addition, if need be they can override the default implementation of getPrimaryKey(String resourceId), getPrivilegeName(String resourceId) and getCompositePrimaryKeySeparator(String resourceId) methods. This class uses DataSecurityAM instance to do Data Security checks of the resources being secured. It has to be noted that the lifecycle of the DataSecurityAM is the same as the lifecycle of the DBTransaction instance returned by getDBTransaction() concrete method, that needs to be implemnted by the developer. The default implementation of getPrimaryKey(String resourceId) assumes that the resourceId represents the primary key of the object and if it holds a composite primary key, the elements of the key are separated by ".". The default implementation of getPrivilegeName(String resourceId) assumes that the "read" privilege is used to secure the resource. The default implementation of getCompositePrimaryKeySeparator(resourceId) assumes that the seperator is ".". This class can also do Function Security check if needed. This requires that the following 3 methods be overloaded. getFSPermissionName(), getFSPermissionAction() and getFSPermissionClass(). The default implementation returns null and no function security check is done. getFSPermissionName() - should provide the name of the permission to check. ex PURCHASE_ORDER_REGION getFSPermissionAction() - should provide the action for the permission, e.g. view, invoke etc. getFSPermissionClass() - should provide the class name that implements the permission, etc. RegionPermission, MethodPermission, or TaskflowPermission For function security check to work, this class requires a code permission grant.
Constructor Summary | |
---|---|
FndTagSecurity()
|
Method Summary | |
---|---|
static boolean |
checkPermission(java.security.Permission functionPerm)
|
java.lang.String |
getCompositePrimaryKeySeparator(java.lang.String resourceId)
The separator used to separate the different parts of the composite primary key, which is concatenated together in resourceId. |
java.lang.String |
getDataSecurityObjectName()
|
java.lang.String |
getDataSecurityObjectName(java.lang.String resourceId)
Gives the name of the object that is secured as defined in FND Data Security system. |
java.lang.String |
getDataSecurityPrivilegeName()
|
oracle.jbo.server.DBTransaction |
getDBTransaction()
Provides a DBTransaction instance that can be used to create a Data Security AM instance that can be used to test tag resource security. |
java.lang.String |
getFSPermissionAction()
Provides the action for the permission, e.g. |
java.lang.String |
getFSPermissionClass()
provide the class name that implements the permission, etc. |
java.lang.String |
getFSPermissionName()
Provides the name of the permission to check. |
java.lang.String[] |
getPrimaryKey(java.lang.String resourceId)
Returns the individuals elements of the Primary Key. |
java.lang.String |
getPrivilegeName(java.lang.String resourceId)
The privilege name to use to secure the tags. |
java.util.List<oracle.webcenter.framework.resource.ResourceInfo> |
getResourceInfo(java.util.List<java.lang.String> resourceId)
|
java.util.List<oracle.webcenter.framework.resource.ResourceInfo> |
getResourceInfo(oracle.webcenter.framework.service.Scope scope,
java.util.List<java.lang.String> resourceId)
|
oracle.webcenter.framework.resource.ResourceInfo |
getResourceInfo(oracle.webcenter.framework.service.Scope scope,
java.lang.String resourceId)
|
oracle.webcenter.framework.resource.ResourceInfo |
getResourceInfo(java.lang.String resourceId)
Check if the user can view the page |
DataSecurityAMImpl |
getSecurityAM()
Deprecated. |
void |
setDataSecurityObjectName(java.lang.String dataSecurityObjectName)
|
void |
setDataSecurityPrivilegeName(java.lang.String dataSecurityPrivilegeName)
|
Methods inherited from class java.lang.Object |
---|
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait |
Constructor Detail |
---|
public FndTagSecurity()
Method Detail |
---|
public java.util.List<oracle.webcenter.framework.resource.ResourceInfo> getResourceInfo(oracle.webcenter.framework.service.Scope scope, java.util.List<java.lang.String> resourceId)
getResourceInfo
in interface oracle.webcenter.framework.resource.ResourceAuthorizer
public java.util.List<oracle.webcenter.framework.resource.ResourceInfo> getResourceInfo(java.util.List<java.lang.String> resourceId)
public oracle.webcenter.framework.resource.ResourceInfo getResourceInfo(oracle.webcenter.framework.service.Scope scope, java.lang.String resourceId)
getResourceInfo
in interface oracle.webcenter.framework.resource.ResourceAuthorizer
public oracle.webcenter.framework.resource.ResourceInfo getResourceInfo(java.lang.String resourceId)
resourceId
- the page name with full pathpublic DataSecurityAMImpl getSecurityAM()
getDBTransaction()
,
getSecurityAMInternal
public java.lang.String[] getPrimaryKey(java.lang.String resourceId)
public java.lang.String getPrivilegeName(java.lang.String resourceId)
public java.lang.String getCompositePrimaryKeySeparator(java.lang.String resourceId)
resourceId
-
public java.lang.String getFSPermissionName()
public java.lang.String getFSPermissionAction()
public java.lang.String getFSPermissionClass()
public static boolean checkPermission(java.security.Permission functionPerm)
public java.lang.String getDataSecurityObjectName(java.lang.String resourceId)
resourceId
-
public void setDataSecurityObjectName(java.lang.String dataSecurityObjectName)
public java.lang.String getDataSecurityObjectName()
public void setDataSecurityPrivilegeName(java.lang.String dataSecurityPrivilegeName)
public java.lang.String getDataSecurityPrivilegeName()
public oracle.jbo.server.DBTransaction getDBTransaction()
|
Oracle Fusion Middleware extensions for Applications Core API Reference 11g Release 1 (11.1.2) E22562-02 |
|||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | |||||||||
SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |