oracle.stellent.ridc.convenience.usersecurity.impl

Class AccessResolverAcl

java.lang.Object

oracle.stellent.ridc.convenience.usersecurity.impl.AccessResolverAcl

All Implemented Interfaces:

IAccessResolver

public class AccessResolverAcl
extends Object
implements IAccessResolver

ACL part of access level

Field Summary

Fields

Modifier and Type	Field and Description
protected CachedDataBinder	m_aliasBinder
protected AliasCache	m_aliasCache
protected CSEnvCache	m_csEnvCache
protected ILog	m_log
protected IdcContext	m_superuser

Constructor Summary

Constructors

Constructor and Description
AccessResolverAcl(CSEnvCache csEnvCache, long timeToLive, IdcContext superuser) The superuser context is used to cache a copy of the Alias list from the content server

Method Summary

Modifier and Type	Method and Description
void	clearCache() Clear the caches
Integer	resolveAccessLevel(DataObject docInfo, DataBinder userBinder) Get the access level or null if no information is available Fix for bug 9782307, only if the document's group is listed in the enviroment's SpecialAuthGroups list will the access level be checked.
Integer	resolveAccessLevel(DataObject docInfo, DataBinder userBinder, ITrace trace) For a given document, determine the user's access level If the resolver determines that it doesn't want to participate in the access level calculation, it returns null

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

m_csEnvCache

protected CSEnvCache m_csEnvCache

m_aliasCache

protected AliasCache m_aliasCache

m_aliasBinder

protected CachedDataBinder m_aliasBinder

m_superuser

protected IdcContext m_superuser

m_log

protected ILog m_log

Constructor Detail

AccessResolverAcl

public AccessResolverAcl(CSEnvCache csEnvCache,
                         long timeToLive,
                         IdcContext superuser)

The superuser context is used to cache a copy of the Alias list from the content server

Parameters:

superuser -

timeToLive -

csEnvCache -

Method Detail

resolveAccessLevel

public Integer resolveAccessLevel(DataObject docInfo,
                                  DataBinder userBinder)

Get the access level or null if no information is available Fix for bug 9782307, only if the document's group is listed in the enviroment's SpecialAuthGroups list will the access level be checked. In addition, if the group is listed but there is no information at all for xClbraUserList nor xClbraAliasList, then a default behavior is performed. The default is controlled by the environment flag AccessListPrivilegesGrantedWhenEmpty

Specified by:

resolveAccessLevel in interface IAccessResolver

Parameters:

docInfo -

userBinder -

Returns:

null or access level

resolveAccessLevel

public Integer resolveAccessLevel(DataObject docInfo,
                                  DataBinder userBinder,
                                  ITrace trace)
                           throws IdcClientException

Description copied from interface: IAccessResolver

For a given document, determine the user's access level If the resolver determines that it doesn't want to participate in the access level calculation, it returns null

Specified by:

resolveAccessLevel in interface IAccessResolver

Parameters:

docInfo - DataObject containing security information about the document (typically from DOC_INFO)

userBinder - DataBinder containing resultsets for user security @return null or access level

Returns:

access levels presented as bits in an integer

Throws:

IdcClientException

clearCache

public void clearCache()

Clear the caches

Specified by:

clearCache in interface IAccessResolver