Package com.easydesk.security.model

Interface SecurityEntityModelManager

All Superinterfaces:

Serializable

All Known Implementing Classes:

EasyDeskModelManager

public interface SecurityEntityModelManager
extends Serializable

Describes all the relationships between entities in the security model.

Version:

$Id$

Author:

Eric Pugh, Youngho Cho

Method Summary

Modifier and Type	Method	Description
<T extends EasyDeskAccessControlList<T>> EasyDeskAccessControlList<T>	getACL(User user)	사용자의 AccessControlList 를 구한다.
void	grant(Role role, Group group)	Group 에 Role 을 부여한다.
void	grant(Role role, Permission permission)	Puts a permission in a role This method is used when adding a permission to a role TODO : switch argument order
void	grant(User user, Group group, Role role)	Grant an User a Role in a Group.
void	replace(User user, Group group, Role oldRole, Role newRole)	Replaces the assigned old Role to new role in the given group for User user.
void	revoke(Role role, Group group)	Group 에서 Role 을 제거한다.
void	revoke(Role role, Permission permission)	Removes a permission from a role TODO : switch argument order
void	revoke(User user, Group group, Role role)	Revoke a Role in a Group from an User.
void	revokeAll(Group group)	Revokes all roles and users from a Group.
void	revokeAll(Role role)	Revokes all permissions from a Role.
void	revokeAll(User user, Group group)	Revokes all roles from an User.

Method Details

getACL

<T extends EasyDeskAccessControlList<T>>
EasyDeskAccessControlList<T> getACL(User user)

사용자의 AccessControlList 를 구한다.

Type Parameters:

T - AccessControlList type

Parameters:

user - 대상 사용자

Returns:

사용자의 AccessControlList

replace

void replace(User user,
 Group group,
 Role oldRole,
 Role newRole)
      throws DataBackendException,
UnknownEntityException

Replaces the assigned old Role to new role in the given group for User user.

Parameters:

user - the User.

group - the Group

oldRole - the old Role

newRole - the new Role

Throws:

DataBackendException - generic exception

UnknownEntityException - generic exception

grant

void grant(Role role,
 Permission permission)
    throws DataBackendException,
UnknownEntityException

Puts a permission in a role This method is used when adding a permission to a role TODO : switch argument order

Parameters:

role - the Role.

permission - the Permission

Throws:

DataBackendException - if there was an error accessing the data backend.

UnknownEntityException - if the account is not present.

revoke

void revoke(Role role,
 Permission permission)
     throws DataBackendException,
UnknownEntityException

Removes a permission from a role TODO : switch argument order

Parameters:

role - the Role.

permission - the Permission

Throws:

DataBackendException - if there was an error accessing the data backend.

UnknownEntityException - if the role or permission is not present.

revokeAll

void revokeAll(User user,
 Group group)
        throws DataBackendException,
UnknownEntityException

Revokes all roles from an User. This method is typically used when deleting an account.

Parameters:

user - the User.

group - the Group.

Throws:

DataBackendException - if there was an error accessing the data backend.

UnknownEntityException - if the account is not present.

revokeAll

void revokeAll(Role role)
        throws DataBackendException,
UnknownEntityException

Revokes all permissions from a Role. This method is typically used when deleting a Role.

Parameters:

role - the Role

Throws:

DataBackendException - if there was an error accessing the data backend.

UnknownEntityException - if the Role is not present.

revokeAll

void revokeAll(Group group)
        throws DataBackendException,
UnknownEntityException

Revokes all roles and users from a Group. This method is typically used when deleting a Group.

Parameters:

group - the Group

Throws:

DataBackendException - if there was an error accessing the data backend.

UnknownEntityException - if the Group is not present.

grant

void grant(User user,
 Group group,
 Role role)
    throws DataBackendException,
UnknownEntityException

Grant an User a Role in a Group.

Parameters:

user - the user.

group - the group.

role - the role.

Throws:

DataBackendException - if there was an error accessing the data backend.

UnknownEntityException - if user account, group or role is not present.

revoke

void revoke(User user,
 Group group,
 Role role)
     throws DataBackendException,
UnknownEntityException

Revoke a Role in a Group from an User.

Parameters:

user - the user.

group - the group.

role - the role.

Throws:

DataBackendException - if there was an error accessing the data backend.

UnknownEntityException - if user account, group or role is not present.

grant

void grant(Role role,
 Group group)
    throws DataBackendException,
UnknownEntityException

Group 에 Role 을 부여한다. (Group 에서 사용할 수 있는 Role 로 등록)

Parameters:

role - the role.

group - the group.

Throws:

DataBackendException - if there was an error accessing the data backend.

UnknownEntityException - if group or role is not present.

revoke

void revoke(Role role,
 Group group)
     throws DataBackendException,
UnknownEntityException

Group 에서 Role 을 제거한다.

Parameters:

role - the role.

group - the group.

Throws:

DataBackendException - if there was an error accessing the data backend.

UnknownEntityException - if group or role is not present.