com.tsgrp.opencontent.hbase.security

Class HBaseSecurityUtil

java.lang.Object

com.tsgrp.opencontent.hbase.security.HBaseSecurityUtil

public class HBaseSecurityUtil
extends java.lang.Object

Constructor Summary

Constructors

Constructor and Description
HBaseSecurityUtil()

Method Summary

Modifier and Type	Method and Description
static void	checkPermission(java.lang.String ticket, java.lang.String objectId, int requestedPermit) Permission check against the requested object for the requested permissions level.
static java.lang.String	determineLifeCycleAcl(java.lang.String ticket, java.lang.String objectType, java.lang.String state, EnhancedCompleteObject eco)
static java.lang.String[]	getACLNames(java.lang.String ticket) Return a list of ALL of the ACL names that exist in the repository
static java.lang.String	getObjectACL(java.lang.String objectId) Get the acl id of the given object
static java.lang.String[]	getUserACLs(java.lang.String ticket, int minPermit) For the currently logged-in user, retrieve a list of the ids of all ACLs in which the user has at least minimumPermission
static int	getUserPermission(java.lang.String ticket, java.lang.String aclId, java.lang.String userName) Gets the permission level of the user for this specific ACL (which will be the greater of the user's permit and the group_all permit) TODO: assumes right now that the user only appears once in the ACL...

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

HBaseSecurityUtil

public HBaseSecurityUtil()

Method Detail

checkPermission

public static void checkPermission(java.lang.String ticket,
                                   java.lang.String objectId,
                                   int requestedPermit)
                            throws OCForbiddenRuntimeException

Permission check against the requested object for the requested permissions level. Throws an exception if the user does not have the requested permissions level

Parameters:

ticket -

objectId -

requestedPermit -

Throws:

OCForbiddenRuntimeException

getObjectACL

public static java.lang.String getObjectACL(java.lang.String objectId)

Get the acl id of the given object

Parameters:

objectId -

Returns:

ID of the ACL on a given object

getUserPermission

public static int getUserPermission(java.lang.String ticket,
                                    java.lang.String aclId,
                                    java.lang.String userName)

Gets the permission level of the user for this specific ACL (which will be the greater of the user's permit and the group_all permit) TODO: assumes right now that the user only appears once in the ACL... if a user is added more than once, the "last" one that comes back from HBase will be the one that is evaluated against

Parameters:

ticket -

aclId -

userName -

Returns:

permission int level from HBaseConstants

getUserACLs

public static java.lang.String[] getUserACLs(java.lang.String ticket,
                                             int minPermit)

For the currently logged-in user, retrieve a list of the ids of all ACLs in which the user has at least minimumPermission

Parameters:

ticket -

minPermit - - for example, 2 means the user must have at least browse permission in the acl

Returns:

getACLNames

public static java.lang.String[] getACLNames(java.lang.String ticket)

Return a list of ALL of the ACL names that exist in the repository

Parameters:

ticket -

Returns:

determineLifeCycleAcl

public static java.lang.String determineLifeCycleAcl(java.lang.String ticket,
                                                     java.lang.String objectType,
                                                     java.lang.String state,
                                                     EnhancedCompleteObject eco)