com.dtolabs.rundeck.core.authorization

Class SubjectAuthContext

java.lang.Object

com.dtolabs.rundeck.core.authorization.SubjectAuthContext

All Implemented Interfaces:

AuthContext, NamedAuthContext

public class SubjectAuthContext
extends java.lang.Object
implements NamedAuthContext

Wraps a Subject and Authorization to provide AuthContext

Constructor Summary

Constructors

Constructor and Description
SubjectAuthContext(javax.security.auth.Subject subject, Authorization authorization)

Method Summary

Methods

Modifier and Type	Method and Description
Decision	evaluate(java.util.Map<java.lang.String,java.lang.String> resource, java.lang.String action, java.util.Set<Attribute> environment) Evaluate the authorization request and return if this request is valid.
java.util.Set<Decision>	evaluate(java.util.Set<java.util.Map<java.lang.String,java.lang.String>> resources, java.util.Set<java.lang.String> actions, java.util.Set<Attribute> environment) Make a multiple resource determination.
java.lang.String	getUsername()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SubjectAuthContext

public SubjectAuthContext(javax.security.auth.Subject subject,
                  Authorization authorization)

Method Detail

getUsername

public java.lang.String getUsername()

Specified by:

getUsername in interface NamedAuthContext

evaluate

public Decision evaluate(java.util.Map<java.lang.String,java.lang.String> resource,
                java.lang.String action,
                java.util.Set<Attribute> environment)

Description copied from interface: AuthContext

Evaluate the authorization request and return if this request is valid. Make a single resource determination.
The method is loosely based on the XACML model for structuring requests and response.
These can be prefixed with a fully qualified namespace and ':'.
If anything goes wrong in evaluating the request, the result will be false. No exception will be thrown.

Specified by:

evaluate in interface AuthContext

Parameters:

resource - The properties that identify the resource.

action - A set of actions that are being requested on the resource.

environment - A set of environment properties (hostname, time of day, etc.)

Returns:

decision Return true if the subject's action on the object given the environment is authorized.

evaluate

public java.util.Set<Decision> evaluate(java.util.Set<java.util.Map<java.lang.String,java.lang.String>> resources,
                               java.util.Set<java.lang.String> actions,
                               java.util.Set<Attribute> environment)

Description copied from interface: AuthContext

Make a multiple resource determination.

Specified by:

evaluate in interface AuthContext

Parameters:

resources - resource set

actions - action set

environment - environment

Returns:

decisions