Examples of AuthorizationManager

com.bitmovers.maui.engine.AuthorizationManager
This is used to match up license levels with allowed activities.
com.ecyrd.jspwiki.auth.AuthorizationManager
Manages all access control and authorization; determines what authenticated users are allowed to do.

Privileges in JSPWiki are expressed as Java-standard {@link java.security.Permission}classes. There are two types of permissions:
- {@link com.ecyrd.jspwiki.auth.permissions.WikiPermission} - privileges that applyto an entire wiki instance: e.g., editing user profiles, creating pages, creating groups
- {@link com.ecyrd.jspwiki.auth.permissions.PagePermission} - privileges that applyto a single wiki page or range of pages: e.g., reading, editing, renaming
Calling classes determine whether they are entitled to perform a particular action by constructing the appropriate permission first, then passing it and the current {@link com.ecyrd.jspwiki.WikiSession} to the{@link #checkPermission(WikiSession,Permission)} method. If the session'sSubject possesses the permission, the action is allowed.

For WikiPermissions, the decision criteria is relatively simple: the caller either possesses the permission, as granted by the wiki security policy -- or not.

For PagePermissions, the logic is exactly the same if the page being checked does not have an access control list. However, if the page does have an ACL, the authorization decision is made based the union of the permissions granted in the ACL and in the security policy. In other words, the user must be named in the ACL (or belong to a group or role that is named in the ACL) and be granted (at least) the same permission in the security policy. We do this to prevent a user from gaining more permissions than they already have, based on the security policy.

See the {@link #checkPermission(WikiSession,Permission)} and{@link #hasRoleOrPrincipal(WikiSession,Principal)} methods for more informationon the authorization logic.
@author Andrew Jaquith @since 2.3 @see AuthenticationManager
com.google.enterprise.connector.spi.AuthorizationManager
Authorization Manager. All calls related to authorizing particular users to see particular documents pass through this interface. @since 1.0
com.vmware.vim25.mo.AuthorizationManager
blecloud.org)
de.iritgo.aktera.authorization.AuthorizationManager
An AuthorizationManager is a service that is able to determine if the specified operation is allowed for the given user. How it determines this is entirely up to the implementation of the security manager. It is possible that a security manager implementation may "nest" other security managers - e.g. call other security managers and make sure that they all agree that the user has access to the given operation. @author Michael Nash
es.ipsa.atril.sec.user.AuthorizationManager
io.undertow.servlet.api.AuthorizationManager
Authorization manager. The servlet implementation delegates all authorization checks to this interface. @author Stuart Douglas
org.apache.isis.core.runtime.authorization.AuthorizationManager
Authorises the user in the current session view and use members of an object.
org.apache.wiki.auth.AuthorizationManager
Manages all access control and authorization; determines what authenticated users are allowed to do.

Privileges in JSPWiki are expressed as Java-standard {@link java.security.Permission}classes. There are two types of permissions:
- {@link org.apache.wiki.auth.permissions.WikiPermission} - privileges that applyto an entire wiki instance: e.g., editing user profiles, creating pages, creating groups
- {@link org.apache.wiki.auth.permissions.PagePermission} - privileges that applyto a single wiki page or range of pages: e.g., reading, editing, renaming
Calling classes determine whether they are entitled to perform a particular action by constructing the appropriate permission first, then passing it and the current {@link org.apache.wiki.WikiSession} to the{@link #checkPermission(WikiSession,Permission)} method. If the session'sSubject possesses the permission, the action is allowed.

For WikiPermissions, the decision criteria is relatively simple: the caller either possesses the permission, as granted by the wiki security policy -- or not.

For PagePermissions, the logic is exactly the same if the page being checked does not have an access control list. However, if the page does have an ACL, the authorization decision is made based the union of the permissions granted in the ACL and in the security policy. In other words, the user must be named in the ACL (or belong to a group or role that is named in the ACL) and be granted (at least) the same permission in the security policy. We do this to prevent a user from gaining more permissions than they already have, based on the security policy.

See the {@link #checkPermission(WikiSession,Permission)} and{@link #hasRoleOrPrincipal(WikiSession,Principal)} methods for more informationon the authorization logic.
@since 2.3 @see AuthenticationManager
org.camunda.bpm.engine.impl.persistence.entity.AuthorizationManager
@author Daniel Meyer
org.infinispan.security.AuthorizationManager
The AuthorizationManager is a cache-scoped component which verifies that the {@link Subject}associated with the current {@link AccessControlContext} has the requested permissions. @author Tristan Tarrant @since 7.0
org.jboss.security.AuthorizationManager
Generalized Authorization Manager Interface.

Replaces the legacy RealmMapping interface @see org.jboss.security.RealmMapping @author Anil Saldhana @since Jan 2, 2006 @version $Revision: 68778 $
org.sonatype.security.authorization.AuthorizationManager
A DAO for Roles and Privileges comming from a given source. @author Brian Demers
org.uberfire.security.authz.AuthorizationManager
org.wso2.carbon.user.api.AuthorizationManager
org.wso2.carbon.user.core.AuthorizationManager

Examples of com.bitmovers.maui.engine.AuthorizationManager

{
  private MFrame frame = new MFrame ("Session Limit Exceeded");
  public SessionLimitExceeded (Object aInitializer)
  {
    super (aInitializer, "Session Limit Exceeded");
    AuthorizationManager theAuth = AuthorizationManager.getInstance ();
    MLabel theLabel =
      new MLabel ("License level does not allow more than " +
            theAuth.getAuthorizationValue (theAuth.AUTHORIZATION_SESSIONS).
              toString () + " sessions");
    frame.add (theLabel);
    MButton theButton = new MButton ("OK");
    theButton.setLink ("http://maui.bitmovers.com");
    theButton.addActionListener (new MActionListener ()

View Full Code Here

Examples of com.ecyrd.jspwiki.auth.AuthorizationManager

     */
    private boolean checkPermission( String permission )
    {
        WikiSession session        = m_wikiContext.getWikiSession();
        WikiPage    page           = m_wikiContext.getPage();
        AuthorizationManager mgr   = m_wikiContext.getEngine().getAuthorizationManager();
        boolean gotPermission     = false;
        
        if ( CREATE_GROUPS.equals( permission ) || CREATE_PAGES.equals( permission )
            || EDIT_PREFERENCES.equals( permission ) || EDIT_PROFILE.equals( permission )
            || LOGIN.equals( permission ) )
        {
            gotPermission = mgr.checkPermission( session, new WikiPermission( page.getWiki(), permission ) );
        }
        else if ( VIEW_GROUP.equals( permission ) 
            || EDIT_GROUP.equals( permission )
            || DELETE_GROUP.equals( permission ) )
        {
            Command command = m_wikiContext.getCommand();
            gotPermission = false;
            if ( command instanceof GroupCommand && command.getTarget() != null )
            {
                GroupPrincipal group = (GroupPrincipal)command.getTarget();
                String groupName = group.getName();
                String action = "view";
                if( EDIT_GROUP.equals( permission ) )
                {
                    action = "edit";
                }
                else if ( DELETE_GROUP.equals( permission ) )
                {
                    action = "delete";
                }
                gotPermission = mgr.checkPermission( session, new GroupPermission( groupName, action ) );
            }
        }
        else if ( ALL_PERMISSION.equals( permission ) )
        {
            gotPermission = mgr.checkPermission( session, new AllPermission( m_wikiContext.getEngine().getApplicationName() ) );
        }
        else if ( page != null )
        {
            //
            //  Edit tag also checks that we're not trying to edit an
            //  old version: they cannot be edited.
            //
            if( EDIT.equals(permission) )
            {
                WikiPage latest = m_wikiContext.getEngine().getPage( page.getName() );
                if( page.getVersion() != WikiProvider.LATEST_VERSION &&
                    latest.getVersion() != page.getVersion() )
                {
                    return false;
                }
            }


            Permission p = PermissionFactory.getPagePermission( page, permission );
            gotPermission = mgr.checkPermission( session,
                                                  p );
        }
        
        return gotPermission;
    }

View Full Code Here

Examples of com.google.enterprise.connector.spi.AuthorizationManager

  public void testConnectorImplementsRequiredInterfaces() {
    try {
      Connector connector = new AfydConnector(null, "ignored.properties", null);
      Session session = connector.login();
      AuthenticationManager authnManager = session.getAuthenticationManager();
      AuthorizationManager authzManager = session.getAuthorizationManager();
      TraversalManager traversalManager = session.getTraversalManager();
    } catch (ClassCastException cce) {
      Assert.fail(cce.toString());
    } catch (RepositoryException re) {
      // this is OK to throw

View Full Code Here

Examples of com.vmware.vim25.mo.AuthorizationManager

    }
    
    ServiceInstance si = new ServiceInstance(
        new URL(args[0]), args[1], args[2], true);


    AuthorizationManager am = si.getAuthorizationManager();
    AuthorizationDescription ad = am.getDescription();
    
    System.out.println("Descriptions of all privileges:");
    printDescriptions(ad.getPrivilege());


    System.out.println("Descriptions of all privilege groups:");
    printDescriptions( ad.getPrivilegeGroup());


    System.out.println("List of all privileges with details:");
    printPrivileges(am.getPrivilegeList());
    
    System.out.println("List of all the roles with details:");
    printRoles(am.getRoleList());
    
    si.getServerConnection().logout();
  }

View Full Code Here

Examples of de.iritgo.aktera.authorization.AuthorizationManager


      uiRequest.setUserEnvironment(userEnvironment);


      UIController controller = (UIController) KeelContainer.defaultContainer().getSpringBean(controllerId);


      AuthorizationManager authorizationManager = (AuthorizationManager) KeelContainer.defaultContainer()
              .getSpringBean(AuthorizationManager.ID);


      if (! authorizationManager.allowed(controller, controllerId, userEnvironment))
      {
        throw new SecurityException("Controller '" + controllerId + "' not authorized");
      }


      BeanResponse uiResponse = new BeanResponse();

View Full Code Here

Examples of es.ipsa.atril.sec.user.AuthorizationManager

    return new CaptureType(oDms.getDocument(oLst.get(0).id()));
  }


  public void grantAll(AtrilSession oSes)
    throws ElementNotFoundException, NotEnoughRightsException, DmsException, InstantiationException, IllegalAccessException {
    AuthorizationManager oAum = oSes.getAuthorizationManager();
    Dms oDms = oSes.getDms();
    DocumentRights oGrt = RightsFactory.getDocumentRightsAllGrant();
    ArrayList<User> aUsrs = Users.top(oSes).list(oSes);
    Document oCpts = getDocument();
    for (User u : aUsrs) {
      String sNick = u.getNickName();
      if (!sNick.equals("admin")) {
        es.ipsa.atril.sec.user.User oUsr = oAum.getUser(sNick);
        oAum.setDocumentRights(oUsr, oCpts, oGrt);
        for (Document t : oCpts.children()) {
          oAum.setDocumentRights(oUsr, oDms.getDocument(t.id()), oGrt);
          for (Document f : t.children()) {
            oAum.setDocumentRights(oUsr, oDms.getDocument(f.id()), oGrt);
            for (Document s : f.children()) {
              oAum.setDocumentRights(oUsr, oDms.getDocument(s.id()), oGrt);              
            } // next
          } // next
        } // next
      } // fi
    } // next

View Full Code Here

Examples of io.undertow.servlet.api.AuthorizationManager

            }
        }


        final ServletChain servlet = servletRequestContext.getCurrentServlet();
        final Deployment deployment = servletContext.getDeployment();
        final AuthorizationManager authorizationManager = deployment.getDeploymentInfo().getAuthorizationManager();
        return authorizationManager.isUserInRole(role, account, servlet.getManagedServlet().getServletInfo(), this, deployment);
    }

View Full Code Here

Examples of io.undertow.servlet.api.AuthorizationManager

            }
        }


        final ServletChain servlet = servletRequestContext.getCurrentServlet();
        final Deployment deployment = servletContext.getDeployment();
        final AuthorizationManager authorizationManager = deployment.getDeploymentInfo().getAuthorizationManager();
        return authorizationManager.isUserInRole(role, account, servlet.getManagedServlet().getServletInfo(), this, deployment);
    }

View Full Code Here

Examples of io.undertow.servlet.api.AuthorizationManager

            }
        }


        final ServletChain servlet = servletRequestContext.getCurrentServlet();
        final Deployment deployment = servletContext.getDeployment();
        final AuthorizationManager authorizationManager = deployment.getDeploymentInfo().getAuthorizationManager();
        return authorizationManager.isUserInRole(role, account, servlet.getManagedServlet().getServletInfo(), this, deployment);
    }

View Full Code Here

Examples of org.apache.isis.core.runtime.authorization.AuthorizationManager

    public void process(final ProcessMethodContext processMethodContext) {
        FacetUtil.addFacet(createFacet(processMethodContext.getFacetHolder()));
    }


    private AuthorizationFacetImpl createFacet(final FacetHolder holder) {
        final AuthorizationManager authorizationManager = getAuthorizationManager();
        return new AuthorizationFacetImpl(holder, authorizationManager);
    }

View Full Code Here

0 1 2 3 4 5

TOP

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.