org.codice.ddf.admin.config.policy

Class AdminConfigPolicy

java.lang.Object

org.codice.ddf.admin.config.policy.AdminConfigPolicy

All Implemented Interfaces:

PolicyExtension

public class AdminConfigPolicy
extends Object
implements PolicyExtension

Field Summary

Fields

Modifier and Type	Field and Description
static String	FEATURE_NAME
static String	SERVICE_PID
static String	VIEW_FEATURE_ACTION
static String	VIEW_SERVICE_ACTION

Constructor Summary

Constructors

Constructor and Description
AdminConfigPolicy()

Method Summary

Modifier and Type	Method and Description
KeyValueCollectionPermission	isPermittedMatchAll(CollectionPermission subjectAllCollection, KeyValueCollectionPermission matchAllCollection, KeyValueCollectionPermission allPermissionsCollection) This method should return any permissions that it was unable to imply.
KeyValueCollectionPermission	isPermittedMatchOne(CollectionPermission subjectAllCollection, KeyValueCollectionPermission matchOneCollection, KeyValueCollectionPermission allPermissionsCollection) This method should return any permissions that it was unable to imply.
Map<String,List<KeyValueCollectionPermission>>	parsePermissions(List<String> policies)
void	setFeaturePolicies(List<String> featurePolicies)
void	setServicePolicies(List<String> servicePolicies)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

FEATURE_NAME

public static final String FEATURE_NAME

See Also:

Constant Field Values

SERVICE_PID

public static final String SERVICE_PID

See Also:

Constant Field Values

VIEW_FEATURE_ACTION

public static final String VIEW_FEATURE_ACTION

See Also:

Constant Field Values

VIEW_SERVICE_ACTION

public static final String VIEW_SERVICE_ACTION

See Also:

Constant Field Values

Constructor Detail

AdminConfigPolicy

public AdminConfigPolicy()

Method Detail

isPermittedMatchAll

public KeyValueCollectionPermission isPermittedMatchAll(CollectionPermission subjectAllCollection,
                                                        KeyValueCollectionPermission matchAllCollection,
                                                        KeyValueCollectionPermission allPermissionsCollection)

Description copied from interface: PolicyExtension

This method should return any permissions that it was unable to imply. That should include any permissions that the method does not understand. For example: if 10 match all permissions are passed into the method and 2 of those permissions can be implied, then the method should return the remaining 8 match all permissions.

Warning: not returning any permissions from this method will immediately grant access to every request and bypass the rest of the PDP.

Specified by:

isPermittedMatchAll in interface PolicyExtension

Parameters:

subjectAllCollection - Subject permissions

matchAllCollection - Match all permissions

allPermissionsCollection - Reference list of all permissions

Returns:

KeyValueCollectionPermission - set of permissions that can not be implied by this extension

isPermittedMatchOne

public KeyValueCollectionPermission isPermittedMatchOne(CollectionPermission subjectAllCollection,
                                                        KeyValueCollectionPermission matchOneCollection,
                                                        KeyValueCollectionPermission allPermissionsCollection)

Description copied from interface: PolicyExtension

This method should return any permissions that it was unable to imply. That should include any permissions that the method does not understand. For example: if 10 match one permissions are passed into the method and 2 of those permissions can be implied, then the method should return the remaining 8 match one permissions.

Warning: not returning any permissions from this method will immediately grant access to every request and bypass the rest of the PDP.

Specified by:

isPermittedMatchOne in interface PolicyExtension

Parameters:

subjectAllCollection - Subject permissions

matchOneCollection - Match one permissions

allPermissionsCollection - Reference list of all permissions

Returns:

KeyValueCollectionPermission - set of permissions that can not be implied by this extension

setFeaturePolicies

public void setFeaturePolicies(List<String> featurePolicies)

setServicePolicies

public void setServicePolicies(List<String> servicePolicies)

parsePermissions

public Map<String,List<KeyValueCollectionPermission>> parsePermissions(List<String> policies)