org.keycloak.models.utils

Class RoleUtils

java.lang.Object

org.keycloak.models.utils.RoleUtils

public class RoleUtils
extends Object

Author:

Stian Thorgersen

Constructor Summary

Constructors

Constructor and Description
RoleUtils()

Method Summary

Modifier and Type	Method and Description
static Stream<RoleModel>	expandCompositeRolesStream(RoleModel role) Recursively expands composite roles into their composite.
static boolean	hasRole(Set<RoleModel> roles, RoleModel targetRole)
static boolean	hasRoleFromGroup(GroupModel group, RoleModel targetRole, boolean checkParentGroup) Checks whether the targetRole is contained in the given group or its parents (if requested)
static boolean	hasRoleFromGroup(Iterable<GroupModel> groups, RoleModel targetRole, boolean checkParentGroup) Checks whether the targetRole is contained in any of the groups or their parents (if requested)
static boolean	isMember(Set<GroupModel> groups, GroupModel targetGroup)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

RoleUtils

public RoleUtils()

Method Detail

isMember

public static boolean isMember(Set<GroupModel> groups,
                               GroupModel targetGroup)

Parameters:

groups -

targetGroup -

Returns:

true if targetGroup is in groups (directly or indirectly via parent child relationship)

hasRole

public static boolean hasRole(Set<RoleModel> roles,
                              RoleModel targetRole)

Parameters:

roles -

targetRole -

Returns:

true if targetRole is in roles (directly or indirectly via composite role)

hasRoleFromGroup

public static boolean hasRoleFromGroup(GroupModel group,
                                       RoleModel targetRole,
                                       boolean checkParentGroup)

Checks whether the targetRole is contained in the given group or its parents (if requested)

Parameters:

group - Group to check role for

targetRole -

checkParentGroup - When true, also parent group is recursively checked for role

Returns:

true if targetRole is in roles (directly or indirectly via composite role)

hasRoleFromGroup

public static boolean hasRoleFromGroup(Iterable<GroupModel> groups,
                                       RoleModel targetRole,
                                       boolean checkParentGroup)

Checks whether the targetRole is contained in any of the groups or their parents (if requested)

Parameters:

groups -

targetRole -

checkParentGroup - When true, also parent group is recursively checked for role

Returns:

true if targetRole is in roles (directly or indirectly via composite role)

expandCompositeRolesStream

public static Stream<RoleModel> expandCompositeRolesStream(RoleModel role)

Recursively expands composite roles into their composite.

Parameters:

role -

Returns:

Stream of containing all of the composite roles and their components.