org.opencms.security

类 CmsAccessControlList

java.lang.Object

org.opencms.security.CmsAccessControlList

public class CmsAccessControlList
extends java.lang.Object

An access control list contains the permission sets of all principals for a distinct resource that are calculated on the permissions defined by various access control entries.

To each single resource, access control entries of type CmsAccessControlEntry can be assigned. An access control entry defines the permissions (both allowed and explicitly denied) of a user or group for this resource.

By calling the method getAccessControlList the list is generated on the resource. It contains the result of merging both access control entries defined immediately on the resource and inherited along the folder hierarchie in the OpenCms virtual file system (controlled by flags in the entry).

To check the permissions of a user on a distinct resource, the method hasPermissions in the driver manager is called in each operation. This method acts as access guard and matches the required permissions for the operation against the allowed and denied permissions defined for the user or groups of this user.

从以下版本开始:

6.0.0

构造器概要

构造器

构造器和说明
CmsAccessControlList() Constructor to create an empty access control list for a given resource.

方法概要

方法

限定符和类型	方法和说明
void	add(CmsAccessControlEntry entry) Adds an access control entry to the access control list.
java.lang.Object	clone() Returns a clone of this Objects instance.
java.util.Map<CmsUUID,CmsPermissionSetCustom>	getPermissionMap() Returns the permission map of this access control list.
CmsPermissionSetCustom	getPermissions(CmsUser user, java.util.List<CmsGroup> groups, java.util.List<CmsRole> roles) Calculates the permissions of the given user and his groups from the access control list.
CmsPermissionSetCustom	getPermissions(CmsUUID principalId) Returns the permission set of a principal as stored in the access control list.
java.lang.String	getPermissionString(CmsUser user, java.util.List<CmsGroup> groups, java.util.List<CmsRole> roles) Calculates the permissions of the given user and his groups from the access control list.
java.util.List<CmsUUID>	getPrincipals() Returns the principals with specific permissions stored in this access control list.
void	setAllowedPermissions(CmsAccessControlEntry entry) Sets the allowed permissions of a given access control entry as allowed permissions in the access control list.
void	setDeniedPermissions(CmsAccessControlEntry entry) Sets the denied permissions of a given access control entry as denied permissions in the access control list.

从类继承的方法 java.lang.Object

equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

构造器详细资料

CmsAccessControlList

public CmsAccessControlList()

Constructor to create an empty access control list for a given resource.

方法详细资料

add

public void add(CmsAccessControlEntry entry)

Adds an access control entry to the access control list.

参数:

entry - the access control entry to add

clone

public java.lang.Object clone()

Returns a clone of this Objects instance.

覆盖:

clone 在类中 java.lang.Object

返回:

a clone of this instance

getPermissionMap

public java.util.Map<CmsUUID,CmsPermissionSetCustom> getPermissionMap()

Returns the permission map of this access control list.

返回:

permission map

getPermissions

public CmsPermissionSetCustom getPermissions(CmsUser user,
                                    java.util.List<CmsGroup> groups,
                                    java.util.List<CmsRole> roles)

Calculates the permissions of the given user and his groups from the access control list.

参数:

user - the user

groups - the groups of this user

roles - the roles of this user

返回:

the summarized permission set of the user

getPermissions

public CmsPermissionSetCustom getPermissions(CmsUUID principalId)

Returns the permission set of a principal as stored in the access control list.

参数:

principalId - the id of the principal (group or user)

返回:

the current permissions of this single principal

getPermissionString

public java.lang.String getPermissionString(CmsUser user,
                                   java.util.List<CmsGroup> groups,
                                   java.util.List<CmsRole> roles)

Calculates the permissions of the given user and his groups from the access control list.

The permissions are returned as permission string in the format {{+|-}{r|w|v|c|i}}*.

参数:

user - the user

groups - the groups of this user

roles - the roles of this user

返回:

a string that displays the permissions

getPrincipals

public java.util.List<CmsUUID> getPrincipals()

Returns the principals with specific permissions stored in this access control list.

返回:

enumeration of principals (each group or user)

setAllowedPermissions

public void setAllowedPermissions(CmsAccessControlEntry entry)

Sets the allowed permissions of a given access control entry as allowed permissions in the access control list.

The denied permissions are left unchanged.

参数:

entry - the access control entry

setDeniedPermissions

public void setDeniedPermissions(CmsAccessControlEntry entry)

Sets the denied permissions of a given access control entry as denied permissions in the access control list.

The allowed permissions are left unchanged.

参数:

entry - the access control entry