com.dtolabs.rundeck.core.authorization

Class SubjectAuthContext

java.lang.Object

com.dtolabs.rundeck.core.authorization.SubjectAuthContext

All Implemented Interfaces:

AuthContext, NamedAuthContext, UserAndRoles, UserAndRolesAuthContext

public class SubjectAuthContext
extends java.lang.Object
implements UserAndRolesAuthContext

Wraps a Subject and Authorization to provide AuthContext

Constructor Summary

Constructors

Constructor and Description
SubjectAuthContext(javax.security.auth.Subject subject, Authorization authorization)

Method Summary

Modifier and Type	Method and Description
UserAndRolesAuthContext	combineWith(Authorization authorization)
Decision	evaluate(java.util.Map<java.lang.String,java.lang.String> resource, java.lang.String action, java.util.Set<Attribute> environment) Evaluate the authorization request and return if this request is valid.
java.util.Set<Decision>	evaluate(java.util.Set<java.util.Map<java.lang.String,java.lang.String>> resources, java.util.Set<java.lang.String> actions, java.util.Set<Attribute> environment) Make a multiple resource determination.
java.util.Set<java.lang.String>	getRoles()
java.lang.String	getUsername()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SubjectAuthContext

public SubjectAuthContext(javax.security.auth.Subject subject,
                          Authorization authorization)

Method Detail

getUsername

public java.lang.String getUsername()

Specified by:

getUsername in interface NamedAuthContext

Specified by:

getUsername in interface UserAndRoles

Returns:

username

getRoles

public java.util.Set<java.lang.String> getRoles()

Specified by:

getRoles in interface UserAndRoles

Returns:

list of user roles

combineWith

public UserAndRolesAuthContext combineWith(Authorization authorization)

Specified by:

combineWith in interface AuthContext

Specified by:

combineWith in interface UserAndRolesAuthContext

Parameters:

authorization - additional authorization

Returns:

new AuthContext combined with the additional authorization

evaluate

public Decision evaluate(java.util.Map<java.lang.String,java.lang.String> resource,
                         java.lang.String action,
                         java.util.Set<Attribute> environment)

Description copied from interface: AuthContext

Evaluate the authorization request and return if this request is valid. Make a single resource determination.
The method is loosely based on the XACML model for structuring requests and response.
These can be prefixed with a fully qualified namespace and ':'.
If anything goes wrong in evaluating the request, the result will be false. No exception will be thrown.

Specified by:

evaluate in interface AuthContext

Parameters:

resource - The properties that identify the resource.

action - A set of actions that are being requested on the resource.

environment - A set of environment properties (hostname, time of day, etc.)

Returns:

decision Return true if the subject's action on the object given the environment is authorized.

evaluate

public java.util.Set<Decision> evaluate(java.util.Set<java.util.Map<java.lang.String,java.lang.String>> resources,
                                        java.util.Set<java.lang.String> actions,
                                        java.util.Set<Attribute> environment)

Description copied from interface: AuthContext

Make a multiple resource determination.

Specified by:

evaluate in interface AuthContext

Parameters:

resources - resource set

actions - action set

environment - environment

Returns:

decisions