com.bea.p13n.security
Class ResourceAuthorizer

java.lang.Object
  com.bea.p13n.security.ResourceAuthorizer

public class ResourceAuthorizer
extends Object

The ResourceAuthorizer class provides runtime methods for checking security policies on a URLResource.

Constructor Summary

ResourceAuthorizer()

Method Summary

static boolean	isAccessAllowed(javax.servlet.http.HttpServletRequest hServletRequest, String resourceURI)
static boolean	isAnonymousURIAccessAllowed(javax.servlet.http.HttpServletRequest request, String resourceURI)
static boolean	isURIAccessAllowed(javax.servlet.http.HttpServletRequest request, String resourceURI) Evaluates whether access is allowed to view a URI resource

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ResourceAuthorizer

public ResourceAuthorizer()

Method Detail

isAnonymousURIAccessAllowed

public static boolean isAnonymousURIAccessAllowed(javax.servlet.http.HttpServletRequest request,
                                                  String resourceURI)

isURIAccessAllowed

public static boolean isURIAccessAllowed(javax.servlet.http.HttpServletRequest request,
                                         String resourceURI)

Evaluates whether access is allowed to view a URI resource

Parameters

request - The HttpServletRequest sent in to evaulate the user principal

resourceURI - String representation of the resource to check access on. Path to the resource without the webApp name.

Returns

True if access is allowed, otherwise false.

isAccessAllowed

public static boolean isAccessAllowed(javax.servlet.http.HttpServletRequest hServletRequest,
                                      String resourceURI)