com.google.gerrit.server.account

Class CapabilityControl

java.lang.Object

com.google.gerrit.server.account.CapabilityControl

public class CapabilityControl
extends Object

Access control management for server-wide capabilities.

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static interface	CapabilityControl.Factory

Method Summary

Modifier and Type	Method and Description
boolean	canAccessDatabase()
boolean	canAdministrateServer()
boolean	canCreateAccount()
boolean	canCreateGroup()
boolean	canCreateProject()
boolean	canEmailReviewers()
boolean	canFlushCaches()
boolean	canKillTask()
boolean	canMaintainServer()
boolean	canModifyAccount()
boolean	canPerform(String permissionName) True if the user has this permission.
boolean	canRunAs()
boolean	canRunGC()
boolean	canStreamEvents()
boolean	canViewAllAccounts()
boolean	canViewCaches()
boolean	canViewConnections()
boolean	canViewPlugins()
boolean	canViewQueue()
QueueProvider.QueueType	getQueueType()
PermissionRange	getRange(String permission) The range of permitted values associated with a label permission.
CurrentUser	getUser() Identity of the user the control will compute for.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

getUser

public CurrentUser getUser()

Identity of the user the control will compute for.

canAdministrateServer

public boolean canAdministrateServer()

Returns:

true if the user can administer this server.

canCreateAccount

public boolean canCreateAccount()

Returns:

true if the user can create an account for another user.

canCreateGroup

public boolean canCreateGroup()

Returns:

true if the user can create a group.

canCreateProject

public boolean canCreateProject()

Returns:

true if the user can create a project.

canEmailReviewers

public boolean canEmailReviewers()

Returns:

true if the user can email reviewers.

canKillTask

public boolean canKillTask()

Returns:

true if the user can kill any running task.

canModifyAccount

public boolean canModifyAccount()

Returns:

true if the user can modify an account for another user.

canViewAllAccounts

public boolean canViewAllAccounts()

Returns:

true if the user can view all accounts.

canViewCaches

public boolean canViewCaches()

Returns:

true if the user can view the server caches.

canFlushCaches

public boolean canFlushCaches()

Returns:

true if the user can flush the server's caches.

canMaintainServer

public boolean canMaintainServer()

Returns:

true if the user can perform basic server maintenance.

canViewConnections

public boolean canViewConnections()

Returns:

true if the user can view open connections.

canViewPlugins

public boolean canViewPlugins()

Returns:

true if the user can view the installed plugins.

canViewQueue

public boolean canViewQueue()

Returns:

true if the user can view the entire queue.

canAccessDatabase

public boolean canAccessDatabase()

Returns:

true if the user can access the database (with gsql).

canStreamEvents

public boolean canStreamEvents()

Returns:

true if the user can stream Gerrit events.

canRunGC

public boolean canRunGC()

Returns:

true if the user can run the Git garbage collection.

canRunAs

public boolean canRunAs()

Returns:

true if the user can impersonate another user.

getQueueType

public QueueProvider.QueueType getQueueType()

Returns:

which priority queue the user's tasks should be submitted to.

canPerform

public boolean canPerform(String permissionName)

True if the user has this permission. Works only for non labels.

getRange

public PermissionRange getRange(String permission)

The range of permitted values associated with a label permission.