Package com.easydesk.security.model

Class EasyDeskModelManager

java.lang.Object

com.easydesk.security.model.EasyDeskModelManager

All Implemented Interfaces:

SecurityEntityModelManager, Serializable

@Component
public class EasyDeskModelManager
extends Object
implements SecurityEntityModelManager

This implementation persists user-group-role-permission relation to a database via Torque.

관계를 제거할 때는 대부분 record 를 삭제하지 않고 삭제 표시(deleted mark)를 한다. (단, revokeAll(Group) 은 record 를 삭제한다.)

Version:

$Id:$

Author:

Thomas Vandahl, Youngho Cho

See Also:

• Serialized Form

Constructor Summary

Constructors

Constructor	Description
EasyDeskModelManager()

Method Summary

Modifier and Type	Method	Description
EasyDeskAccessControlList<EasyDeskAccessControlListImpl>	getACL(User user)	사용자의 User-Group-Role 정보로 AccessControlList 를 생성한다.
void	grant(Role role, Group group)	Group 에 Role 을 부여한다.
void	grant(Role role, Permission permission)	Grants a Role a Permission.
void	grant(User user, Group group, Role role)	Grant an User a Role in a Group.
void	replace(User user, Group group, Role oldRole, Role newRole)	Replaces the assigned old Role to new role in the given group for User user.
void	revoke(Role role, Group group)	Group 에서 Role 을 제거한다.
void	revoke(Role role, Permission permission)	Revokes a Permission from a Role.
void	revoke(User user, Group group, Role role)	Revoke a Role in a Group from an User.
void	revokeAll(Group group)	Revokes all roles and users from a Group.
void	revokeAll(Role role)	Revokes all permissions from a Role.
void	revokeAll(User user, Group group)	Revokes all roles in the group from an User.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

EasyDeskModelManager

public EasyDeskModelManager()

Method Details

getACL

public EasyDeskAccessControlList<EasyDeskAccessControlListImpl> getACL(User user)

사용자의 User-Group-Role 정보로 AccessControlList 를 생성한다.

Specified by:

getACL in interface SecurityEntityModelManager

Parameters:

user - 대상 사용자

Returns:

acl for the user. If the user is not present, an empty ACL is returned.

revokeAll

public void revokeAll(User user,
 Group group)
               throws DataBackendException,
UnknownEntityException

Revokes all roles in the group from an User. This method is typically used when deleting an account.

사용자의 User-Group-Role 중 주어진 group 의 것에 삭제 표시를 한다. group 이 null 이면 모든 group 의 역할을 회수한다. 저장에 실패한 항목은 log 만 남기고 계속 진행한다.

Specified by:

revokeAll in interface SecurityEntityModelManager

Parameters:

user - the User.

group - the Group, null 이면 모든 group

Throws:

DataBackendException - if there was an error accessing the data backend.

UnknownEntityException - if the account is not present.

revokeAll

public void revokeAll(Role role)
               throws DataBackendException,
UnknownEntityException

Revokes all permissions from a Role. This method is typically used when deleting a Role. 제거에 실패한 permission 은 log 만 남기고 계속 진행한다.

Specified by:

revokeAll in interface SecurityEntityModelManager

Parameters:

role - the Role

Throws:

DataBackendException - if there was an error accessing the data backend.

UnknownEntityException - if the Role is not present.

revokeAll

public void revokeAll(Group group)
               throws DataBackendException,
UnknownEntityException

Revokes all roles and users from a Group. This method is typically used when deleting a Group. Group 의 User-Group-Role record 를 삭제한다.

Specified by:

revokeAll in interface SecurityEntityModelManager

Parameters:

group - the Group

Throws:

DataBackendException - if there was an error accessing the data backend.

UnknownEntityException - if the Group is not present.

grant

public void grant(Role role,
 Permission permission)
           throws DataBackendException,
UnknownEntityException

Grants a Role a Permission. 이미 부여되어 있으면 아무 것도 하지 않는다.

Specified by:

grant in interface SecurityEntityModelManager

Parameters:

role - the Role.

permission - the Permission.

Throws:

DataBackendException - if there was an error accessing the data backend.

UnknownEntityException - if role or permission is not present.

revoke

public void revoke(Role role,
 Permission permission)
            throws DataBackendException,
UnknownEntityException

Revokes a Permission from a Role. Role-Permission record 에 삭제 표시를 한다.

Specified by:

revoke in interface SecurityEntityModelManager

Parameters:

role - the Role.

permission - the Permission.

Throws:

DataBackendException - if there was an error accessing the data backend or the Role-Permission record does not exist.

UnknownEntityException - if role or permission is not present.

grant

public void grant(User user,
 Group group,
 Role role)
           throws DataBackendException,
UnknownEntityException

Grant an User a Role in a Group. User-Group-Role record 를 새로 저장한다. (중복 여부는 확인하지 않는다)

Specified by:

grant in interface SecurityEntityModelManager

Parameters:

user - the user.

group - the group.

role - the role.

Throws:

DataBackendException - if there was an error accessing the data backend.

UnknownEntityException - if user account, group or role is not present.

revoke

public void revoke(User user,
 Group group,
 Role role)
            throws DataBackendException,
UnknownEntityException

Revoke a Role in a Group from an User. 해당 User-Group-Role record 에 삭제 표시를 한다.

Specified by:

revoke in interface SecurityEntityModelManager

Parameters:

user - the user.

group - the group.

role - the role.

Throws:

DataBackendException - if there was an error accessing the data backend.

UnknownEntityException - if user account, group or role is not present.

replace

public void replace(User user,
 Group group,
 Role oldRole,
 Role newRole)
             throws DataBackendException,
UnknownEntityException

Replaces the assigned old Role to new role in the given group for User user. oldRole 을 revoke 한 후 newRole 을 grant 한다.

Specified by:

replace in interface SecurityEntityModelManager

Parameters:

user - the User.

group - the Group

oldRole - the old Role

newRole - the new Role

Throws:

DataBackendException - if there was an error accessing the data backend.

UnknownEntityException - if user account, group or role is not present.

grant

public void grant(Role role,
 Group group)
           throws DataBackendException,
UnknownEntityException

Group 에 Role 을 부여한다. Group-Role record 를 새로 저장한다.

Specified by:

grant in interface SecurityEntityModelManager

Parameters:

role - the role.

group - the group.

Throws:

DataBackendException - if there was an error accessing the data backend.

UnknownEntityException - if group or role is not present.

revoke

public void revoke(Role role,
 Group group)
            throws DataBackendException,
UnknownEntityException

Group 에서 Role 을 제거한다. Group-Role record 에 삭제 표시를 한다.

Specified by:

revoke in interface SecurityEntityModelManager

Parameters:

role - the role.

group - the group.

Throws:

DataBackendException - if there was an error accessing the data backend or the Group-Role record does not exist.

UnknownEntityException - if group or role is not present.