oracle.oud.controls

Interface GetEffectiveRightsRequestControl

All Superinterfaces:

Control

public interface GetEffectiveRightsRequestControl
extends Control

A partial implementation of the get effective rights request control as defined in draft-ietf-ldapext-acl-model. The main differences are:

• The response control is not supported. Instead the OpenDS implementation creates attributes containing effective rights information with the entry being returned.
• The attribute type names are dynamically created.
• The set of attributes for which effective rights information is to be requested can be included in the control.

The get effective rights request control value has the following BER encoding:

  GetRightsControl ::= SEQUENCE {
    authzId    authzId  -- Only the "dn:DN" form is supported.
    attributes  SEQUENCE OF AttributeType
  }
 

See Also:

draft-ietf-ldapext-acl-model - Access Control Model for LDAPv3

Field Summary

Fields

Modifier and Type	Field and Description
static ControlDecoder<GetEffectiveRightsRequestControl>	DECODER A decoder which can be used for decoding the get effective rights request control.

Method Summary

Modifier and Type	Method and Description
java.util.Collection<AttributeType>	getAttributes() Returns an unmodifiable list of attributes for which effective rights are to be returned, which may be empty indicating that no attribute rights are to be returned.
DN	getAuthorizationName() Returns the distinguished name of the user for which effective rights are to be returned, or null if the client's authentication ID is to be used.

Methods inherited from interface oracle.oud.controls.Control

getAPIValue, getDetails, getOID, hasValue, isCritical

Field Detail

DECODER

static final ControlDecoder<GetEffectiveRightsRequestControl> DECODER

A decoder which can be used for decoding the get effective rights request control.

Method Detail

getAttributes

java.util.Collection<AttributeType> getAttributes()

Returns an unmodifiable list of attributes for which effective rights are to be returned, which may be empty indicating that no attribute rights are to be returned.

Returns:

The unmodifiable list of attributes for which effective rights are to be returned.

getAuthorizationName

DN getAuthorizationName()

Returns the distinguished name of the user for which effective rights are to be returned, or null if the client's authentication ID is to be used.

Returns:

The distinguished name of the user for which effective rights are to be returned.