Package io.jmix.security.impl.constraint

Class AuthenticationPolicyStore

java.lang.Object

io.jmix.security.impl.constraint.AuthenticationPolicyStore

All Implemented Interfaces:

PolicyStore

@NullMarked
@Component("sec_AuthenticationPolicyStore")
public class AuthenticationPolicyStore
extends Object
implements PolicyStore

Resolves the current user's security policies from assigned roles and registered policy contributors.

Field Summary

Fields

Modifier and Type	Field	Description
protected List<PolicyStoreContributor>	contributors
protected CurrentAuthentication	currentAuthentication
protected ExtendedEntities	extendedEntities
protected ResourceRoleRepository	resourceRoleRepository
protected RoleGrantedAuthorityUtils	roleGrantedAuthorityUtils
protected RowLevelRoleRepository	rowLevelRoleRepository

Constructor Summary

Constructors

Constructor	Description
AuthenticationPolicyStore()

Method Summary

Modifier and Type	Method	Description
protected Stream<ResourcePolicy>	extractResourcePoliciesFromAuthenticationByScope(Function<ResourceRole,Stream<ResourcePolicy>> extractor)
protected Stream<RowLevelPolicy>	extractRowLevelPoliciesFromAuthentication(Function<RowLevelRole,Stream<RowLevelPolicy>> extractor)
protected <T> Stream<T>	getContributorPolicies(Function<PolicyStoreContributor,Stream<T>> extractor)
Stream<ResourcePolicy>	getEntityAttributesResourcePolicies(MetaClass metaClass, String attribute)
Stream<ResourcePolicy>	getEntityAttributesResourcePoliciesByWildcard(String entityWildcard, String attributeWildcard)
Stream<ResourcePolicy>	getEntityResourcePolicies(MetaClass metaClass)
Stream<ResourcePolicy>	getEntityResourcePoliciesByWildcard(String wildcard)
protected Stream<ResourcePolicy>	getPoliciesStreamByTypeAndResources(ResourceRole resourceRole, String policyType, Collection<String> resources)
Stream<RowLevelPolicy>	getRowLevelPolicies(MetaClass metaClass)
protected @Nullable String	getScope(org.springframework.security.core.Authentication authentication)
Stream<ResourcePolicy>	getSpecificResourcePolicies(String resourceName)
protected boolean	isAppliedForScope(ResourceRole resourceRole, @Nullable String scope)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

currentAuthentication

@Autowired
protected CurrentAuthentication currentAuthentication

extendedEntities

@Autowired
protected ExtendedEntities extendedEntities

resourceRoleRepository

@Autowired
protected ResourceRoleRepository resourceRoleRepository

rowLevelRoleRepository

@Autowired
protected RowLevelRoleRepository rowLevelRoleRepository

roleGrantedAuthorityUtils

@Autowired
protected RoleGrantedAuthorityUtils roleGrantedAuthorityUtils

contributors

@Autowired(required=false)
protected List<PolicyStoreContributor> contributors

Constructor Details

AuthenticationPolicyStore

public AuthenticationPolicyStore()

Method Details

getRowLevelPolicies

public Stream<RowLevelPolicy> getRowLevelPolicies(MetaClass metaClass)

Specified by:

getRowLevelPolicies in interface PolicyStore

getEntityResourcePolicies

public Stream<ResourcePolicy> getEntityResourcePolicies(MetaClass metaClass)

Specified by:

getEntityResourcePolicies in interface PolicyStore

getEntityResourcePoliciesByWildcard

public Stream<ResourcePolicy> getEntityResourcePoliciesByWildcard(String wildcard)

Specified by:

getEntityResourcePoliciesByWildcard in interface PolicyStore

getEntityAttributesResourcePolicies

public Stream<ResourcePolicy> getEntityAttributesResourcePolicies(MetaClass metaClass,
 String attribute)

Specified by:

getEntityAttributesResourcePolicies in interface PolicyStore

getEntityAttributesResourcePoliciesByWildcard

public Stream<ResourcePolicy> getEntityAttributesResourcePoliciesByWildcard(String entityWildcard,
 String attributeWildcard)

Specified by:

getEntityAttributesResourcePoliciesByWildcard in interface PolicyStore

getSpecificResourcePolicies

public Stream<ResourcePolicy> getSpecificResourcePolicies(String resourceName)

Specified by:

getSpecificResourcePolicies in interface PolicyStore

extractResourcePoliciesFromAuthenticationByScope

protected Stream<ResourcePolicy> extractResourcePoliciesFromAuthenticationByScope(Function<ResourceRole,Stream<ResourcePolicy>> extractor)

extractRowLevelPoliciesFromAuthentication

protected Stream<RowLevelPolicy> extractRowLevelPoliciesFromAuthentication(Function<RowLevelRole,Stream<RowLevelPolicy>> extractor)

getScope

protected @Nullable String getScope(org.springframework.security.core.Authentication authentication)

isAppliedForScope

protected boolean isAppliedForScope(ResourceRole resourceRole,
 @Nullable String scope)

getPoliciesStreamByTypeAndResources

protected Stream<ResourcePolicy> getPoliciesStreamByTypeAndResources(ResourceRole resourceRole,
 String policyType,
 Collection<String> resources)

getContributorPolicies

protected <T> Stream<T> getContributorPolicies(Function<PolicyStoreContributor,Stream<T>> extractor)