Skip navigation links

oracle.stellent.ridc.convenience.usersecurity.impl
Class AccessResolverAcl

java.lang.Object
oracle.stellent.ridc.convenience.usersecurity.impl.AccessResolverAcl

All Implemented Interfaces:

IAccessResolver

public class AccessResolverAcl

extends Object

implements IAccessResolver

ACL part of access level

Field Summary

protected CachedDataBinder	m_aliasBinder
protected AliasCache	m_aliasCache
protected Map<String,Map<String,Integer>>	m_attribMap
protected CSEnvCache	m_csEnvCache
protected ILog	m_log
protected IdcContext	m_superuser

Constructor Summary

AccessResolverAcl(CSEnvCache csEnvCache, long timeToLive, IdcContext superuser)
The superuser context is used to cache a copy of the Alias list from the content server

Method Summary

void	clearCache() Clear the caches
Integer	resolveAccessLevel(DataObject docInfo, DataBinder userBinder) Get the access level or null if no information is available Fix for bug 9782307, only if the document's group is listed in the enviroment's SpecialAuthGroups list will the access level be checked.
Integer	resolveAccessLevel(DataObject docInfo, DataBinder userBinder, ITrace trace) For a given document, determine the user's access level If the resolver determines that it doesn't want to participate in the access level calculation, it returns null

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

m_csEnvCache

protected CSEnvCache m_csEnvCache

m_aliasCache

protected AliasCache m_aliasCache

m_aliasBinder

protected CachedDataBinder m_aliasBinder

m_superuser

protected IdcContext m_superuser

m_attribMap

protected Map<String,Map<String,Integer>> m_attribMap

m_log

protected ILog m_log

Constructor Detail

AccessResolverAcl

public AccessResolverAcl(CSEnvCache csEnvCache,
                         long timeToLive,
                         IdcContext superuser)

The superuser context is used to cache a copy of the Alias list from the content server

Parameters:

superuser -

timeToLive -

csEnvCache -

Method Detail

resolveAccessLevel

public Integer resolveAccessLevel(DataObject docInfo,
                                  DataBinder userBinder)

Get the access level or null if no information is available Fix for bug 9782307, only if the document's group is listed in the enviroment's SpecialAuthGroups list will the access level be checked. In addition, if the group is listed but there is no information at all for xClbraUserList nor xClbraAliasList, then a default behavior is performed. The default is controlled by the environment flag AccessListPrivilegesGrantedWhenEmpty

Specified by:

resolveAccessLevel in interface IAccessResolver

Parameters:

docInfo -

userBinder -

Returns:

null or access level

resolveAccessLevel

public Integer resolveAccessLevel(DataObject docInfo,
                                  DataBinder userBinder,
                                  ITrace trace)
                           throws IdcClientException

Description copied from interface: IAccessResolver

For a given document, determine the user's access level If the resolver determines that it doesn't want to participate in the access level calculation, it returns null

Specified by:

resolveAccessLevel in interface IAccessResolver

Parameters:

docInfo - DataObject containing security information about the document (typically from DOC_INFO)

userBinder - DataBinder containing resultsets for user security @return null or access level

Returns:

access levels presented as bits in an integer

Throws:

IdcClientException

clearCache

public void clearCache()

Clear the caches

Specified by:

clearCache in interface IAccessResolver

Skip navigation links