org.rapidoid.security

Class Secure

java.lang.Object

org.rapidoid.RapidoidThing

org.rapidoid.security.Secure

All Implemented Interfaces:

Constants

@Authors(value="Nikolche Mihajlovski")
 @Since(value="2.0.0")
public class Secure
extends RapidoidThing
implements Constants

Field Summary

Fields inherited from interface org.rapidoid.util.Constants

AMP, ASTERISK, BYTE_0, COL, CR, CR_, CR_LF, CR_LF_CR_LF, DELETE, EMPTY_ARRAY, EMPTY_STRING_ARRAY, EQ, F, GET, GET_OR_POST, HEAD, HTTP_VERBS, LF, LF_, LF_LF, NOT_FOUND, OPTIONS, PATCH, POST, PUT, SEMI_COL, SEPARATOR_LINE, SPACE, SPACE_, T, TRACE

Constructor Summary

Constructors

Constructor and Description
Secure()

Method Summary

Modifier and Type	Method and Description
static boolean	canAccessClass(String username, Class<?> clazz)
static boolean	canAccessClass(String username, Set<String> roles, Class<?> clazz)
static boolean	canAccessMethod(String username, Set<String> roles, Method method)
static boolean	canDelete(String username, Set<String> roles, Object record)
static boolean	canInsert(String username, Set<String> roles, Object record)
static boolean	canRead(String username, Set<String> roles, Object record)
static boolean	canReadProperty(String username, Set<String> roles, Object record, String property)
static boolean	canUpdate(String username, Set<String> roles, Object record)
static boolean	canUpdateProperty(String username, Set<String> roles, Object record, String property)
static DataPermissions	classPermissions(String username, Class<?> clazz)
static DataPermissions	getClassPermissions(String username, Set<String> roles, Class<?> clazz)
static DataPermissions	getObjectPermissions(String username, Set<String> roles, Object target)
static DataPermissions	getPropertyPermissions(String username, Set<String> roles, Class<?> clazz, Object target, String propertyName)
static Set<String>	getRolesAllowed(Class<?> clazz)
static Set<String>	getRolesAllowed(Map<Class<?>,Annotation> annotations)
static Set<String>	getRolesAllowed(Method method)
static boolean	hasAnyRole(String username, Set<String> roles, Set<String> targetRoles)
static boolean	hasAnyRole(String username, Set<String> roles, Set<String> targetRoles, Class<?> clazz, Object target)
protected static boolean	hasRole(String username, Set<String> roles, String role)
static boolean	hasRole(String username, Set<String> roles, String role, Class<?> clazz, Object record)
static boolean	hasRoleBasedClassAccess(String username, Set<String> roles, Class<?> clazz)
static boolean	hasRoleBasedMethodAccess(String username, Set<String> roles, Method method)
static boolean	hasRoleBasedObjectAccess(String username, Set<String> roles, Object target)
static boolean	hasRoleForClass(String username, Set<String> roles, String role, Class<?> clazz)
static boolean	hasRoleForRecord(String username, Set<String> roles, String role, Object record)
protected static boolean	hasSpecialRoleInDevMode(String username, String role)
static boolean	isAdministrator(String username, Set<String> roles)
static boolean	isManager(String username, Set<String> roles)
static boolean	isModerator(String username, Set<String> roles)
static boolean	isOwnerOf(String username, Object record)
static boolean	isOwnerOf(String username, Set<String> roles, Object record)
static boolean	isSharedWith(String username, Object record)
static boolean	isSharedWith(String username, Set<String> roles, Object record)
static DataPermissions	propertyPermissions(String username, Object record, String propertyName)
static DataPermissions	recordPermissions(String username, Object record)
static void	resetInvisibleProperties(String username, Set<String> roles, Object record)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

Secure

public Secure()

Method Detail

hasRoleForClass

public static boolean hasRoleForClass(String username,
                                      Set<String> roles,
                                      String role,
                                      Class<?> clazz)

hasRoleForRecord

public static boolean hasRoleForRecord(String username,
                                       Set<String> roles,
                                       String role,
                                       Object record)

isOwnerOf

public static boolean isOwnerOf(String username,
                                Set<String> roles,
                                Object record)

isSharedWith

public static boolean isSharedWith(String username,
                                   Set<String> roles,
                                   Object record)

canAccessClass

public static boolean canAccessClass(String username,
                                     Set<String> roles,
                                     Class<?> clazz)

canAccessMethod

public static boolean canAccessMethod(String username,
                                      Set<String> roles,
                                      Method method)

hasRoleBasedClassAccess

public static boolean hasRoleBasedClassAccess(String username,
                                              Set<String> roles,
                                              Class<?> clazz)

hasRoleBasedObjectAccess

public static boolean hasRoleBasedObjectAccess(String username,
                                               Set<String> roles,
                                               Object target)

hasRoleBasedMethodAccess

public static boolean hasRoleBasedMethodAccess(String username,
                                               Set<String> roles,
                                               Method method)

hasAnyRole

public static boolean hasAnyRole(String username,
                                 Set<String> roles,
                                 Set<String> targetRoles,
                                 Class<?> clazz,
                                 Object target)

hasAnyRole

public static boolean hasAnyRole(String username,
                                 Set<String> roles,
                                 Set<String> targetRoles)

getPropertyPermissions

public static DataPermissions getPropertyPermissions(String username,
                                                     Set<String> roles,
                                                     Class<?> clazz,
                                                     Object target,
                                                     String propertyName)

getClassPermissions

public static DataPermissions getClassPermissions(String username,
                                                  Set<String> roles,
                                                  Class<?> clazz)

getObjectPermissions

public static DataPermissions getObjectPermissions(String username,
                                                   Set<String> roles,
                                                   Object target)

canRead

public static boolean canRead(String username,
                              Set<String> roles,
                              Object record)

canInsert

public static boolean canInsert(String username,
                                Set<String> roles,
                                Object record)

canUpdate

public static boolean canUpdate(String username,
                                Set<String> roles,
                                Object record)

canDelete

public static boolean canDelete(String username,
                                Set<String> roles,
                                Object record)

canReadProperty

public static boolean canReadProperty(String username,
                                      Set<String> roles,
                                      Object record,
                                      String property)

canUpdateProperty

public static boolean canUpdateProperty(String username,
                                        Set<String> roles,
                                        Object record,
                                        String property)

resetInvisibleProperties

public static void resetInvisibleProperties(String username,
                                            Set<String> roles,
                                            Object record)

getRolesAllowed

public static Set<String> getRolesAllowed(Map<Class<?>,Annotation> annotations)

getRolesAllowed

public static Set<String> getRolesAllowed(Class<?> clazz)

getRolesAllowed

public static Set<String> getRolesAllowed(Method method)

canAccessClass

public static boolean canAccessClass(String username,
                                     Class<?> clazz)

hasRole

public static boolean hasRole(String username,
                              Set<String> roles,
                              String role,
                              Class<?> clazz,
                              Object record)

hasSpecialRoleInDevMode

protected static boolean hasSpecialRoleInDevMode(String username,
                                                 String role)

hasRole

protected static boolean hasRole(String username,
                                 Set<String> roles,
                                 String role)

isAdministrator

public static boolean isAdministrator(String username,
                                      Set<String> roles)

isManager

public static boolean isManager(String username,
                                Set<String> roles)

isModerator

public static boolean isModerator(String username,
                                  Set<String> roles)

classPermissions

public static DataPermissions classPermissions(String username,
                                               Class<?> clazz)

recordPermissions

public static DataPermissions recordPermissions(String username,
                                                Object record)

propertyPermissions

public static DataPermissions propertyPermissions(String username,
                                                  Object record,
                                                  String propertyName)

isOwnerOf

public static boolean isOwnerOf(String username,
                                Object record)

isSharedWith

public static boolean isSharedWith(String username,
                                   Object record)