Uses of Enum Class
com.evolveum.midpoint.xml.ns._public.common.common_3.AuthorizationPhaseType
Packages that use AuthorizationPhaseType
Package
Description
-
Uses of AuthorizationPhaseType in com.evolveum.midpoint.gui.api.factory.wrapper
Methods in com.evolveum.midpoint.gui.api.factory.wrapper that return AuthorizationPhaseTypeMethods in com.evolveum.midpoint.gui.api.factory.wrapper with parameters of type AuthorizationPhaseTypeModifier and TypeMethodDescriptionvoidWrapperContext.setAuthzPhase(AuthorizationPhaseType authzPhase) -
Uses of AuthorizationPhaseType in com.evolveum.midpoint.gui.api.page
Methods in com.evolveum.midpoint.gui.api.page with parameters of type AuthorizationPhaseTypeModifier and TypeMethodDescription<O extends ObjectType,T extends ObjectType>
voidPageBase.authorize(String operationUrl, AuthorizationPhaseType phase, PrismObject<O> object, ObjectDelta<O> delta, PrismObject<T> target, OperationResult result) <O extends ObjectType,T extends ObjectType>
booleanPageAdminLTE.isAuthorized(String operationUrl, AuthorizationPhaseType phase, PrismObject<O> object, ObjectDelta<O> delta, PrismObject<T> target) -
Uses of AuthorizationPhaseType in com.evolveum.midpoint.model.api
Methods in com.evolveum.midpoint.model.api with parameters of type AuthorizationPhaseTypeModifier and TypeMethodDescriptionvoidModelInteractionService.authorizeBulkActionExecution(@Nullable BulkAction action, @Nullable AuthorizationPhaseType phase, Task task, OperationResult result) Just a convenience method that checks that relevant authorization is present.ModelInteractionService.getEditObjectClassDefinition(@NotNull PrismObject<ShadowType> shadow, @NotNull PrismObject<ResourceType> resource, AuthorizationPhaseType phase, Task task, OperationResult result) Returns an object definition that reflects edit-ability of the resource object in terms of midPoint schema limitations and security.<O extends ObjectType>
@NotNull PrismObjectDefinition<O>ModelInteractionService.getEditObjectDefinition(PrismObject<O> object, AuthorizationPhaseType phase, Task task, OperationResult result) Returns a schema that reflects editability of the object in terms of midPoint schema limitations and security.ModelInteractionService.getEditShadowDefinition(ResourceShadowCoordinates coordinates, AuthorizationPhaseType phase, Task task, OperationResult result) -
Uses of AuthorizationPhaseType in com.evolveum.midpoint.model.impl.controller
Methods in com.evolveum.midpoint.model.impl.controller with parameters of type AuthorizationPhaseTypeModifier and TypeMethodDescriptionvoidModelInteractionServiceImpl.authorizeBulkActionExecution(@Nullable BulkAction action, @Nullable AuthorizationPhaseType phase, @NotNull Task task, @NotNull OperationResult result) ModelInteractionServiceImpl.getEditObjectClassDefinition(@NotNull PrismObject<ShadowType> shadow, @NotNull PrismObject<ResourceType> resource, AuthorizationPhaseType phase, Task task, OperationResult result) <O extends ObjectType>
@NotNull PrismObjectDefinition<O>ModelInteractionServiceImpl.getEditObjectDefinition(PrismObject<O> object, AuthorizationPhaseType phase, Task task, OperationResult parentResult) ModelInteractionServiceImpl.getEditShadowDefinition(ResourceShadowCoordinates coordinates, AuthorizationPhaseType phase, Task task, OperationResult parentResult) -
Uses of AuthorizationPhaseType in com.evolveum.midpoint.model.impl.controller.transformer
Methods in com.evolveum.midpoint.model.impl.controller.transformer with parameters of type AuthorizationPhaseTypeModifier and TypeMethodDescription<D extends ItemDefinition<?>>
voidDefinitionAccessProcessor.applySecurityConstraintsToItemDef(D itemDefinition, @NotNull ObjectSecurityConstraints securityConstraints, @Nullable AuthorizationPhaseType phase) -
Uses of AuthorizationPhaseType in com.evolveum.midpoint.model.impl.scripting
Methods in com.evolveum.midpoint.model.impl.scripting that return AuthorizationPhaseTypeMethods in com.evolveum.midpoint.model.impl.scripting with parameters of type AuthorizationPhaseTypeModifier and TypeMethodDescriptionvoidBulkActionsExecutor.authorizeBulkActionExecution(@Nullable BulkAction action, @Nullable AuthorizationPhaseType phase, @NotNull Task task, @NotNull OperationResult result) -
Uses of AuthorizationPhaseType in com.evolveum.midpoint.security.api
Methods in com.evolveum.midpoint.security.api that return AuthorizationPhaseTypeMethods in com.evolveum.midpoint.security.api with parameters of type AuthorizationPhaseTypeModifier and TypeMethodDescriptionbooleanAuthorization.matchesPhase(@Nullable AuthorizationPhaseType phase) -
Uses of AuthorizationPhaseType in com.evolveum.midpoint.security.enforcer.api
Methods in com.evolveum.midpoint.security.enforcer.api with parameters of type AuthorizationPhaseTypeModifier and TypeMethodDescriptiondefault voidSecurityEnforcer.authorize(@NotNull String operationUrl, @Nullable AuthorizationPhaseType phase, @NotNull AbstractAuthorizationParameters params, @NotNull SecurityEnforcer.Options options, @NotNull Task task, @NotNull OperationResult result) Evaluates authorization: simply returns if the currently logged it user is authorized for a specified action.default voidSecurityEnforcer.authorize(@NotNull String operationUrl, @Nullable AuthorizationPhaseType phase, @NotNull AbstractAuthorizationParameters params, @NotNull Task task, @NotNull OperationResult result) Convenience variant ofSecurityEnforcer.authorize(String, AuthorizationPhaseType, AbstractAuthorizationParameters, Options, Task, OperationResult)with the default options.SecurityEnforcer.compileOperationConstraints(@Nullable MidPointPrincipal principal, @NotNull PrismObjectValue<?> value, @Nullable AuthorizationPhaseType phase, @NotNull String[] actionUrls, @NotNull SecurityEnforcer.Options enforcerOptions, @NotNull CompileConstraintsOptions compileConstraintsOptions, @NotNull Task task, @NotNull OperationResult result) Compiles the security constraints related to given `actionUrls` and `phase` for a given principal against the `object`.default AuthorizationDecisionTypeObjectSecurityConstraints.computeItemDecision(@NotNull ItemPath nameOnlyItemPath, @NotNull String[] actionUrls, @Nullable AuthorizationDecisionType defaultDecision, @Nullable AuthorizationPhaseType phase) <T extends ObjectType,O extends ObjectType, F>
FSecurityEnforcer.computeTargetSecurityFilter(MidPointPrincipal principal, String[] operationUrls, @NotNull String[] searchByOperationUrls, AuthorizationPhaseType phase, Class<T> searchResultType, @NotNull PrismObject<O> object, ObjectFilter origFilter, String limitAuthorizationAction, List<OrderConstraintsType> paramOrderConstraints, FilterGizmo<F> gizmo, Task task, OperationResult result) Similar toSecurityEnforcer.preProcessObjectFilter(MidPointPrincipal, String[], String[], AuthorizationPhaseType, Class, ObjectFilter, String, List, Options, Task, OperationResult)but deals with the target-related authorization statements, not object-related ones.@NotNull AccessDecisionSecurityEnforcer.decideAccess(@Nullable MidPointPrincipal principal, @NotNull String operationUrl, @Nullable AuthorizationPhaseType phase, @NotNull AbstractAuthorizationParameters params, @NotNull SecurityEnforcer.Options options, @NotNull Task task, @NotNull OperationResult result) General access-decision method.<O extends ObjectType>
AccessDecisionSecurityEnforcer.determineItemDecision(@NotNull ObjectSecurityConstraints securityConstraints, @NotNull ObjectDelta<O> delta, PrismObject<O> currentObject, @NotNull String operationUrl, @NotNull AuthorizationPhaseType phase, @NotNull ItemPath itemPath) Determines the access to given item (e.g.<C extends Containerable>
AccessDecisionSecurityEnforcer.determineItemValueDecision(@NotNull ObjectSecurityConstraints securityConstraints, @NotNull PrismContainerValue<C> containerValue, @NotNull String operationUrl, @NotNull AuthorizationPhaseType phase, boolean consideringCreation, @NotNull String decisionContextDesc) Determines the access to given value (`containerValue`) carrying e.g. an assignment.voidSecurityEnforcer.failAuthorization(String operationUrl, AuthorizationPhaseType phase, AbstractAuthorizationParameters params, OperationResult result) Produces authorization error with proper message and logs it using proper logger.@Nullable AuthorizationDecisionTypeObjectSecurityConstraints.findAllItemsDecision(@NotNull String[] actionUrls, @Nullable AuthorizationPhaseType phase) A variant ofObjectSecurityConstraints.findAllItemsDecision(String, AuthorizationPhaseType)that considers several equivalent action URLs, e.g.@Nullable AuthorizationDecisionTypeObjectSecurityConstraints.findAllItemsDecision(@NotNull String actionUrl, @Nullable AuthorizationPhaseType phase) Returns the explicit allow-deny decision (if present) that is common to all items in the object.@Nullable AuthorizationDecisionTypeObjectSecurityConstraints.findItemDecision(@NotNull ItemPath nameOnlyItemPath, @NotNull String[] actionUrls, @Nullable AuthorizationPhaseType phase) Returns the explicit allow-deny decision (if present) for the particular item and all its sub-items, relevant to the actions (considered equivalent) and phase(s).@Nullable AuthorizationDecisionTypeObjectSecurityConstraints.findItemDecision(@NotNull ItemPath nameOnlyItemPath, @NotNull String actionUrl, @Nullable AuthorizationPhaseType phase) Returns the explicit allow-deny decision (if present) for the particular item and all its sub-items, relevant to the action and phase(s).default booleanSecurityEnforcer.hasAnyAllowAuthorization(@NotNull List<String> actions, @Nullable AuthorizationPhaseType phase) Checks if the currently logged-in user is authorized for any of the specified actions.default booleanSecurityEnforcer.isAuthorized(@NotNull String operationUrl, @Nullable AuthorizationPhaseType phase, @NotNull AbstractAuthorizationParameters params, @NotNull SecurityEnforcer.Options options, @NotNull Task task, @NotNull OperationResult result) Returns `true` if the currently logged-in user is authorized for specified action (represented by `operationUrl`), returns `false` otherwise.<T> @Nullable ObjectFilterSecurityEnforcer.preProcessObjectFilter(@Nullable MidPointPrincipal principal, @NotNull String[] operationUrls, @NotNull String[] searchByOperationUrls, @Nullable AuthorizationPhaseType phase, @NotNull Class<T> filterType, @Nullable ObjectFilter origFilter, @Nullable String limitAuthorizationAction, @NotNull List<OrderConstraintsType> paramOrderConstraints, @NotNull SecurityEnforcer.Options options, @NotNull Task task, @NotNull OperationResult result) Returns a filter that covers all the objects for which the principal is authorized to apply `operationUrls`. -
Uses of AuthorizationPhaseType in com.evolveum.midpoint.xml.ns._public.common.common_3
Fields in com.evolveum.midpoint.xml.ns._public.common.common_3 declared as AuthorizationPhaseTypeMethods in com.evolveum.midpoint.xml.ns._public.common.common_3 that return AuthorizationPhaseTypeModifier and TypeMethodDescriptionstatic AuthorizationPhaseTypeAuthorizationType.getPhase()FormAuthorizationType.getPhase()static AuthorizationPhaseTypeReturns the enum constant of this class with the specified name.static AuthorizationPhaseType[]AuthorizationPhaseType.values()Returns an array containing the constants of this enum class, in the order they are declared.Methods in com.evolveum.midpoint.xml.ns._public.common.common_3 with parameters of type AuthorizationPhaseTypeModifier and TypeMethodDescriptionAuthorizationType.phase(AuthorizationPhaseType value) FormAuthorizationType.phase(AuthorizationPhaseType value) voidAuthorizationType.setPhase(AuthorizationPhaseType value) voidFormAuthorizationType.setPhase(AuthorizationPhaseType value)