atg.security

Class SecurityUtils

java.lang.Object

atg.security.SecurityUtils

public class SecurityUtils
extends java.lang.Object

Utility methods useful for security system operations.

Field Summary

Fields

Modifier and Type	Field and Description
static java.lang.String	CLASS_VERSION

Constructor Summary

Constructors

Constructor and Description
SecurityUtils()

Method Summary

Modifier and Type	Method and Description
static UserAuthority	baseUserAuthority(UserAuthority pAuthority) Determines the "real" user authority given one that might be a proxy.
static boolean	checkAuthenticationByPassword(LoginUserAuthority pLoginUserAuthority, java.lang.String pLogin, java.lang.String pPassword, java.lang.Object pHashKey) Performs an authentication test on a login name and password, but does not cause the assumption of the identity that is being authenticated if successful.
static boolean	checkAuthenticationByPassword(LoginUserAuthority pLoginUserAuthority, java.lang.String pLogin, java.lang.String pPassword, java.lang.Object pHashKey, java.lang.String pPasswordSalt) Performs an authentication test on a login name and password, but does not cause the assumption of the identity that is being authenticated if successful.
static boolean	checkAuthenticationByPasswordUsingUserPwdHasher(LoginUserAuthority pLoginUserAuthority, java.lang.String pLogin, java.lang.String pPassword, java.lang.Object pHashKey, java.lang.String pPasswordSalt, java.lang.String[] pUserPwdHasherComponentsPath) Performs an authentication test on a login name and password using the password hasher from the user profile, but does not cause the assumption of the identity that is being authenticated if successful.
static boolean	checkUserPwdHasherMatchesPMGRPwdHasher(LoginUserAuthority pLoginUserAuthority, java.lang.String pUserPwdHasherComponentPath) Checks the user password hahser component path is same as the Password hasher present in PropertyManager
static boolean	checkUserPwdHasherMatchesPMGRPwdHasher(PasswordHasher pmgrPwdhasher, java.lang.String pUserPwdHasherComponentPath) Checks the user password hasher component path is same as the Password hasher present in user profile
static boolean	compareUserAuthorities(UserAuthority pAuthority1, UserAuthority pAuthority2) Compares user authorities, returning true if they are effectively equivalent.
protected static java.lang.String	encryptPassword(java.lang.String pLogin, java.lang.String pPassword, PasswordHasher pAlternativeHasher, java.lang.String[] userPwdHasherComponentsPath, java.lang.String[] userSalts) Encrypt the clear password using the password hasher component.
static void	ensureEquivalentUserAuthorities(UserAuthority pAuthority, AccessControlList pAcl) Ensures that all of the personae in an access control list have equivalent user authorities to the indicated user authority.
static void	ensureEquivalentUserAuthorities(UserAuthority pAuthority, Persona pPersona) Ensures that a persona has an equivalent user authority to the indicated authority.
static java.lang.String	generatePassword(java.lang.String pLogin, java.lang.String pPassword, java.lang.String pPasswordSalt, java.lang.String[] pUserPwdHasherComponentsPath, PasswordHasher pAlternativeHasher) Gets the "password string" which represents a user password using the password hasher component.
static java.lang.String	getPwdHasherCompPath(PasswordHasher pHasher) Returns component path for a given password Hasher
static java.lang.String	personaToString(Persona pPersona) Converts a Persona object to a standardized string representation.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

CLASS_VERSION

public static java.lang.String CLASS_VERSION

Constructor Detail

SecurityUtils

public SecurityUtils()

Method Detail

baseUserAuthority

public static UserAuthority baseUserAuthority(UserAuthority pAuthority)

Determines the "real" user authority given one that might be a proxy.

compareUserAuthorities

public static boolean compareUserAuthorities(UserAuthority pAuthority1,
                                             UserAuthority pAuthority2)

Compares user authorities, returning true if they are effectively equivalent. This takes care of shell management.

ensureEquivalentUserAuthorities

public static void ensureEquivalentUserAuthorities(UserAuthority pAuthority,
                                                   Persona pPersona)
                                            throws SecurityException

Ensures that a persona has an equivalent user authority to the indicated authority. In case of failure, an InvalidPersonaException will be thrown.

Throws:

SecurityException

ensureEquivalentUserAuthorities

public static void ensureEquivalentUserAuthorities(UserAuthority pAuthority,
                                                   AccessControlList pAcl)
                                            throws SecurityException

Ensures that all of the personae in an access control list have equivalent user authorities to the indicated user authority. In case of mismatch, an InvalidPersona exception will be thrown.

Throws:

SecurityException

personaToString

public static java.lang.String personaToString(Persona pPersona)

Converts a Persona object to a standardized string representation.

checkAuthenticationByPassword

public static boolean checkAuthenticationByPassword(LoginUserAuthority pLoginUserAuthority,
                                                    java.lang.String pLogin,
                                                    java.lang.String pPassword,
                                                    java.lang.Object pHashKey)
                                             throws SecurityException

Performs an authentication test on a login name and password, but does not cause the assumption of the identity that is being authenticated if successful.

Throws:

SecurityException

See Also:

BasicIdentityManager.checkAuthenticationByPassword

checkAuthenticationByPassword

public static boolean checkAuthenticationByPassword(LoginUserAuthority pLoginUserAuthority,
                                                    java.lang.String pLogin,
                                                    java.lang.String pPassword,
                                                    java.lang.Object pHashKey,
                                                    java.lang.String pPasswordSalt)
                                             throws SecurityException

Performs an authentication test on a login name and password, but does not cause the assumption of the identity that is being authenticated if successful.

Throws:

SecurityException

See Also:

BasicIdentityManager.checkAuthenticationByPassword

checkAuthenticationByPasswordUsingUserPwdHasher

public static boolean checkAuthenticationByPasswordUsingUserPwdHasher(LoginUserAuthority pLoginUserAuthority,
                                                                      java.lang.String pLogin,
                                                                      java.lang.String pPassword,
                                                                      java.lang.Object pHashKey,
                                                                      java.lang.String pPasswordSalt,
                                                                      java.lang.String[] pUserPwdHasherComponentsPath)
                                                               throws SecurityException

Performs an authentication test on a login name and password using the password hasher from the user profile, but does not cause the assumption of the identity that is being authenticated if successful.

Throws:

SecurityException

See Also:

BasicIdentityManager.checkAuthenticationByPassword

checkUserPwdHasherMatchesPMGRPwdHasher

public static boolean checkUserPwdHasherMatchesPMGRPwdHasher(LoginUserAuthority pLoginUserAuthority,
                                                             java.lang.String pUserPwdHasherComponentPath)

Checks the user password hahser component path is same as the Password hasher present in PropertyManager

See Also:

BasicIdentityManager.checkAuthenticationByPassword

checkUserPwdHasherMatchesPMGRPwdHasher

public static boolean checkUserPwdHasherMatchesPMGRPwdHasher(PasswordHasher pmgrPwdhasher,
                                                             java.lang.String pUserPwdHasherComponentPath)

Checks the user password hasher component path is same as the Password hasher present in user profile

See Also:

SecurityUtils.checkUserPwdHasherMatchesPMGRPwdHasher

getPwdHasherCompPath

public static java.lang.String getPwdHasherCompPath(PasswordHasher pHasher)

Returns component path for a given password Hasher

See Also:

SecurityUtils.checkUserPwdHasherMatchesPMGRPwdHasher

generatePassword

public static java.lang.String generatePassword(java.lang.String pLogin,
                                                java.lang.String pPassword,
                                                java.lang.String pPasswordSalt,
                                                java.lang.String[] pUserPwdHasherComponentsPath,
                                                PasswordHasher pAlternativeHasher)

Gets the "password string" which represents a user password using the password hasher component. if the password hasher path is not defined then it returns the "password string" using the alternative PasswordHasher

Parameters:

pLogin - the login

pPassword - the password

pPasswordSalt - the password salt

pUserPwdHasherComponentsPath - the user pwd hasher components path

pAlternativeHasher - the alternative hasher

Returns:

the string

encryptPassword

protected static java.lang.String encryptPassword(java.lang.String pLogin,
                                                  java.lang.String pPassword,
                                                  PasswordHasher pAlternativeHasher,
                                                  java.lang.String[] userPwdHasherComponentsPath,
                                                  java.lang.String[] userSalts)

Encrypt the clear password using the password hasher component. if the password hasher path is not defined then it encrypts the password using the alternative PasswordHasher.

Parameters:

pLogin - the login

pPassword - the password

pAlternativeHasher - the alternative hasher

userPwdHasherComponentsPath - the user pwd hasher components path

userSalts - the user salts

Returns:

the string