org.picketlink.idm.permission.spi

Interface PermissionVoter

All Known Implementing Classes:

PersistentPermissionVoter

public interface PermissionVoter

A PermissionVoter may be used to determine access restrictions for application resources. For every permission check the application performs, the hasPermission() method of each known PermissionVoter is invoked. For the permission check to succeed, at least one PermissionVoter must return a result of VotingResult.ALLOW. If any PermissionVoter returns a result of VotingResult.DENY, the permission check is unsuccessful and the user is not allowed to carry out the requested operation. If a PermissionVoter does not explicitly allow or deny the permission, it should return a result of PermissionVoter.NOT_APPLICABLE.

Author:

Shane Bryzak

Nested Class Summary

Nested Classes

Modifier and Type	Interface and Description
static class	PermissionVoter.VotingResult

Method Summary

Methods

Modifier and Type	Method and Description
PermissionVoter.VotingResult	hasPermission(IdentityType recipient, Class<?> resourceClass, Serializable identifier, String operation)
PermissionVoter.VotingResult	hasPermission(IdentityType recipient, Object resource, String operation)

Method Detail

hasPermission

PermissionVoter.VotingResult hasPermission(IdentityType recipient,
                                         Object resource,
                                         String operation)

hasPermission

PermissionVoter.VotingResult hasPermission(IdentityType recipient,
                                         Class<?> resourceClass,
                                         Serializable identifier,
                                         String operation)