|
|||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | ||||||||
SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |
public interface ESAuthorizationService
Method Summary | |
---|---|
void |
checkAccess(ESMethodInvocation method)
Checks whether a given operation may be executed. |
boolean |
checkProjectAdminAccess(ESSessionId sessionId,
ESGlobalProjectId projectId)
Check if the session is valid for admin access to the given project. |
boolean |
checkProjectAdminAccess(ESSessionId sessionId,
ESGlobalProjectId projectId,
ESProjectAdminPrivileges privileg)
Check if the session is valid for admin access to the given project. |
boolean |
checkProjectAdminAccessForOrgUnit(ESSessionId sessionId,
ESOrgUnitId orgUnitId)
Check if the session is valid for admin access to the given organizational unit. |
boolean |
checkProjectAdminAccessForOrgUnit(ESSessionId sessionId,
ESOrgUnitId orgUnitId,
Set<ESGlobalProjectId> projectIds)
Check if the session is valid for admin access to the given organizational unit. |
void |
checkReadAccess(ESSessionId sessionId,
ESGlobalProjectId projectId,
Set<org.eclipse.emf.ecore.EObject> modelElements)
Check if the session may read the given model elements in the project. |
void |
checkServerAdminAccess(ESSessionId sessionId)
Check if the session is valid for server admin access. |
void |
checkWriteAccess(ESSessionId sessionId,
ESGlobalProjectId projectId,
Set<org.eclipse.emf.ecore.EObject> modelElements)
Check if the session may write the given model elements in the project. |
void |
init(ESSessions sessions,
ESOrgUnitResolver orgUnitResolverServive,
ESOrgUnitProvider orgUnitProvider)
Initializes this service. |
Method Detail |
---|
boolean checkProjectAdminAccess(ESSessionId sessionId, ESGlobalProjectId projectId, ESProjectAdminPrivileges privileg) throws AccessControlException
sessionId
- the session idprojectId
- the project id. May be null
privileg
- the ESProjectAdminPrivileges
to be checked
true
, if permission is granted via the server admin role, false
otherwise
AccessControlException
- if the session is invalid for admin accessboolean checkProjectAdminAccessForOrgUnit(ESSessionId sessionId, ESOrgUnitId orgUnitId) throws AccessControlException
sessionId
- the session idorgUnitId
- the ID of an organizational unit
true
, if permission is granted via the server admin role, false
otherwise
AccessControlException
- if the session is invalid for admin accessboolean checkProjectAdminAccessForOrgUnit(ESSessionId sessionId, ESOrgUnitId orgUnitId, Set<ESGlobalProjectId> projectIds) throws AccessControlException
sessionId
- the session idorgUnitId
- the ID of an organizational unitprojectIds
- the set of ESGlobalProjectId
s for which to check access for
true
, if permission is granted via the server admin role, false
otherwise
AccessControlException
- if the session is invalid for admin accessboolean checkProjectAdminAccess(ESSessionId sessionId, ESGlobalProjectId projectId) throws AccessControlException
sessionId
- the session idprojectId
- the project id. May be null
true
, if permission is granted via the server admin role, false
otherwise
AccessControlException
- if the session is invalid for admin accessvoid checkServerAdminAccess(ESSessionId sessionId) throws AccessControlException
sessionId
- the session id
AccessControlException
- if the session is invalid for server admin accessvoid checkReadAccess(ESSessionId sessionId, ESGlobalProjectId projectId, Set<org.eclipse.emf.ecore.EObject> modelElements) throws AccessControlException
sessionId
- session idprojectId
- project idmodelElements
- a set of model elements
AccessControlException
- if the session may not read any of the model elementsvoid checkWriteAccess(ESSessionId sessionId, ESGlobalProjectId projectId, Set<org.eclipse.emf.ecore.EObject> modelElements) throws AccessControlException
sessionId
- session idprojectId
- project idmodelElements
- a set of model elements
AccessControlException
- if the session may not write any of the model elementsvoid checkAccess(ESMethodInvocation method) throws AccessControlException
method
- the method the user intends to execute
AccessControlException
- in case access is deniedvoid init(ESSessions sessions, ESOrgUnitResolver orgUnitResolverServive, ESOrgUnitProvider orgUnitProvider)
sessions
- the ESSessions
object for session handlingorgUnitResolverServive
- the ESOrgUnitResolver
for resolving organizational unitsorgUnitProvider
- the ESOrgUnitProvider
for obtaining organizational units
|
|||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | ||||||||
SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |