com.sun.identity.liberty.ws.interfaces
インタフェース Authorizer

public interface Authorizer

This class Authorizer is an interface for identity service to check authorization of a WSC.

フィールドの概要

static String	AUTH_TYPE Key of a parameter Map which contains information useful for policy evaluation.
static String	MESSAGE Key of a parameter Map which contains information useful for policy evaluation.
static String	USER_ID Key of a parameter Map which contains information useful for policy evaluation.

メソッドの概要

Object	getAuthorizationDecision(Object credential, String action, Object data, Map env) Returns authorization decision for the given action(query or modify) and to the given select data
boolean	isAuthorized(Object credential, String action, Object data, Map env) Checks if the WSC is authorized to query or modify the select data.

フィールドの詳細

USER_ID

static final String USER_ID

Key of a parameter Map which contains information useful for policy evaluation. The value of this key is id of the user whose resource id being accessed.

関連項目:

定数フィールド値

AUTH_TYPE

static final String AUTH_TYPE

Key of a parameter Map which contains information useful for policy evaluation. The value of this key is the authentication mechanism web service consumer used.

関連項目:

定数フィールド値

MESSAGE

static final String MESSAGE

Key of a parameter Map which contains information useful for policy evaluation. The value of this key is com.sun.identity.liberty.ws.soapbinding.Message.

関連項目:

定数フィールド値

メソッドの詳細

isAuthorized

boolean isAuthorized(Object credential,
                     String action,
                     Object data,
                     Map env)

Checks if the WSC is authorized to query or modify the select data.

パラメータ:

credential - credential of a WSC.

action - request action.

data - Object who is being accessed.

env - A Map contains information useful for policy evaluation. The following key is defined and its value should be passed in: Key: USER_ID Value: id of the user whose resource is being accessed. Key: AUTH_TYPE Value: The authentication mechanism WSC used. Key: MESSAGE Value: com.sun.identity.liberty.ws.soapbinding.Message .

戻り値:

true if the WSC is authorized.

getAuthorizationDecision

Object getAuthorizationDecision(Object credential,
                                String action,
                                Object data,
                                Map env)

Returns authorization decision for the given action(query or modify) and to the given select data

パラメータ:

credential - credential of a WSC.

action - request action.

data - Object who is being accessed.

env - A Map contains information useful for policy evaluation. The following key is defined and its value should be passed in: Key: USER_ID Value: id of the user whose resource is being accessed. Key: AUTH_TYPE Value: The authentication mechanism WSC used. Key: MESSAGE Value: com.sun.identity.liberty.ws.soapbinding.Message.

戻り値:

AuthorizationDecision object contains authorization decision information for the given resource.

例外:

Exception