com.haulmont.cuba.core.global.impl

Class SecurityImpl

java.lang.Object

com.haulmont.cuba.core.global.impl.SecurityImpl

All Implemented Interfaces:

Security

@Component(value="cuba_Security")
public class SecurityImpl
extends java.lang.Object
implements Security

Field Summary

Fields

Modifier and Type	Field and Description
protected io.jmix.core.ExtendedEntities	extendedEntities
protected io.jmix.core.Metadata	metadata
protected io.jmix.core.MetadataTools	metadataTools
protected io.jmix.security.constraint.PolicyStore	policyStore
protected io.jmix.security.constraint.SecureOperations	secureOperations
protected io.jmix.securityui.constraint.UiPolicyStore	uiPolicyStore
protected io.jmix.securityui.constraint.UiSecureOperations	uiSecureOperations

Fields inherited from interface com.haulmont.cuba.core.global.Security

NAME

Constructor Summary

Constructors

Constructor and Description
SecurityImpl()

Method Summary

Modifier and Type	Method and Description
void	checkSpecificPermission(java.lang.String name) Check if current user has a specific permission.
boolean	isEntityAttrPermitted(java.lang.Class<?> entityClass, java.lang.String property, EntityAttrAccess access) Check if current user has permission to an entity attribute.
protected boolean	isEntityAttrPermitted(io.jmix.core.metamodel.model.MetaClass metaClass, io.jmix.core.metamodel.model.MetaPropertyPath propertyPath, EntityAttrAccess access)
boolean	isEntityAttrPermitted(io.jmix.core.metamodel.model.MetaClass metaClass, java.lang.String property, EntityAttrAccess access) Check if current user has permission to an entity attribute.
boolean	isEntityAttrReadPermitted(io.jmix.core.metamodel.model.MetaClass metaClass, java.lang.String propertyPath) Check if current user can read an entity attribute which is the last part of the path given.
boolean	isEntityAttrReadPermitted(io.jmix.core.metamodel.model.MetaPropertyPath metaPropertyPath) Check if current user can read an entity attribute which is the last part of the path given.
boolean	isEntityAttrUpdatePermitted(io.jmix.core.metamodel.model.MetaClass metaClass, java.lang.String propertyPath) Check if current user can modify an entity attribute which is the last part of the path given.
boolean	isEntityAttrUpdatePermitted(io.jmix.core.metamodel.model.MetaPropertyPath metaPropertyPath) Check if current user can modify an entity attribute which is the last part of the path given.
boolean	isEntityOpPermitted(java.lang.Class<?> entityClass, io.jmix.core.security.EntityOp entityOp) Check if current user has permission to execute an entity operation.
boolean	isEntityOpPermitted(io.jmix.core.metamodel.model.MetaClass metaClass, io.jmix.core.security.EntityOp entityOp) Check if current user has permission to execute an entity operation.
boolean	isScreenPermitted(java.lang.String windowAlias) Check if current user has permission to open a screen.
boolean	isSpecificPermitted(java.lang.String name) Check if current user has a specific permission.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

metadata

@Autowired
protected io.jmix.core.Metadata metadata

metadataTools

@Autowired
protected io.jmix.core.MetadataTools metadataTools

extendedEntities

@Autowired
protected io.jmix.core.ExtendedEntities extendedEntities

policyStore

@Autowired
protected io.jmix.security.constraint.PolicyStore policyStore

uiPolicyStore

@Autowired
protected io.jmix.securityui.constraint.UiPolicyStore uiPolicyStore

secureOperations

@Autowired
protected io.jmix.security.constraint.SecureOperations secureOperations

uiSecureOperations

@Autowired
protected io.jmix.securityui.constraint.UiSecureOperations uiSecureOperations

Constructor Detail

SecurityImpl

public SecurityImpl()

Method Detail

isScreenPermitted

public boolean isScreenPermitted(java.lang.String windowAlias)

Description copied from interface: Security

Check if current user has permission to open a screen.

Specified by:

isScreenPermitted in interface Security

Parameters:

windowAlias - screen id as registered in screens.xml

isEntityOpPermitted

public boolean isEntityOpPermitted(io.jmix.core.metamodel.model.MetaClass metaClass,
                                   io.jmix.core.security.EntityOp entityOp)

Description copied from interface: Security

Check if current user has permission to execute an entity operation.
Takes into account original metaclass of entity.

Specified by:

isEntityOpPermitted in interface Security

Parameters:

metaClass - entity meta-class

entityOp - operation

isEntityOpPermitted

public boolean isEntityOpPermitted(java.lang.Class<?> entityClass,
                                   io.jmix.core.security.EntityOp entityOp)

Description copied from interface: Security

Check if current user has permission to execute an entity operation.
Takes into account original metaclass of entity.

Specified by:

isEntityOpPermitted in interface Security

Parameters:

entityClass - entity class

entityOp - operation

isEntityAttrPermitted

public boolean isEntityAttrPermitted(io.jmix.core.metamodel.model.MetaClass metaClass,
                                     java.lang.String property,
                                     EntityAttrAccess access)

Description copied from interface: Security

Check if current user has permission to an entity attribute.
Takes into account original metaclass of entity.

Specified by:

isEntityAttrPermitted in interface Security

Parameters:

metaClass - entity meta-class

property - entity attribute name

access - required access

isEntityAttrPermitted

public boolean isEntityAttrPermitted(java.lang.Class<?> entityClass,
                                     java.lang.String property,
                                     EntityAttrAccess access)

Description copied from interface: Security

Check if current user has permission to an entity attribute.
Takes into account original metaclass of entity.

Specified by:

isEntityAttrPermitted in interface Security

Parameters:

entityClass - entity class

property - entity attribute name

access - required access

isEntityAttrUpdatePermitted

public boolean isEntityAttrUpdatePermitted(io.jmix.core.metamodel.model.MetaClass metaClass,
                                           java.lang.String propertyPath)

Description copied from interface: Security

Check if current user can modify an entity attribute which is the last part of the path given. It means that he has the following permissions:

• EntityOp.CREATE or EntityOp.UPDATE on the whole entity which the attribute belongs to
• EntityAttrAccess.MODIFY on the attribute

Takes into account original metaclass of entity.

Specified by:

isEntityAttrUpdatePermitted in interface Security

Parameters:

metaClass - entity meta class

propertyPath - entity attribute path

isEntityAttrUpdatePermitted

public boolean isEntityAttrUpdatePermitted(io.jmix.core.metamodel.model.MetaPropertyPath metaPropertyPath)

Description copied from interface: Security

Check if current user can modify an entity attribute which is the last part of the path given. It means that he has the following permissions:

• EntityOp.CREATE or EntityOp.UPDATE on the whole entity which the attribute belongs to
• EntityAttrAccess.MODIFY on the attribute

Takes into account original metaclass of entity.

Specified by:

isEntityAttrUpdatePermitted in interface Security

Parameters:

metaPropertyPath - entity attribute path

isEntityAttrReadPermitted

public boolean isEntityAttrReadPermitted(io.jmix.core.metamodel.model.MetaPropertyPath metaPropertyPath)

Description copied from interface: Security

Check if current user can read an entity attribute which is the last part of the path given. It means that he has the following permissions:

• EntityOp.READ on the whole entity which the attribute belongs to
• EntityAttrAccess.VIEW on the attribute

Takes into account original metaclass of entity.

Specified by:

isEntityAttrReadPermitted in interface Security

Parameters:

metaPropertyPath - entity attribute path

isEntityAttrReadPermitted

public boolean isEntityAttrReadPermitted(io.jmix.core.metamodel.model.MetaClass metaClass,
                                         java.lang.String propertyPath)

Description copied from interface: Security

Check if current user can read an entity attribute which is the last part of the path given. It means that he has the following permissions:

• EntityOp.READ on the whole entity which the attribute belongs to
• EntityAttrAccess.VIEW on the attribute

Takes into account original metaclass of entity.

Specified by:

isEntityAttrReadPermitted in interface Security

Parameters:

metaClass - entity meta class

propertyPath - entity attribute path

isSpecificPermitted

public boolean isSpecificPermitted(java.lang.String name)

Description copied from interface: Security

Check if current user has a specific permission.

Specified by:

isSpecificPermitted in interface Security

Parameters:

name - specific permission id

checkSpecificPermission

public void checkSpecificPermission(java.lang.String name)

Description copied from interface: Security

Check if current user has a specific permission.

Specified by:

checkSpecificPermission in interface Security

Parameters:

name - specific permission id

isEntityAttrPermitted

protected boolean isEntityAttrPermitted(io.jmix.core.metamodel.model.MetaClass metaClass,
                                        io.jmix.core.metamodel.model.MetaPropertyPath propertyPath,
                                        EntityAttrAccess access)