Uses of Enum Class
com.evolveum.midpoint.schema.AccessDecision

Packages that use AccessDecision

Package	Description
com.evolveum.midpoint.schema
com.evolveum.midpoint.schema.expression
com.evolveum.midpoint.security.enforcer.api

Uses of AccessDecision in com.evolveum.midpoint.schema

Methods in com.evolveum.midpoint.schema that return AccessDecision

Modifier and Type	Method	Description
static AccessDecision	AccessDecision.combine(AccessDecision oldDecision, AccessDecision newDecision)	Rules: - `null` values are ignored, - any DENY means DENY, - any DEFAULT means DEFAULT, - otherwise, only ALLOW remains, leading to ALLOW.
static @NotNull AccessDecision	AccessDecision.translate(AuthorizationDecisionType bean)
static AccessDecision	AccessDecision.valueOf(String name)	Returns the enum constant of this class with the specified name.
static AccessDecision[]	AccessDecision.values()	Returns an array containing the constants of this enum class, in the order they are declared.

Methods in com.evolveum.midpoint.schema with parameters of type AccessDecision

Modifier and Type	Method	Description
static AccessDecision	AccessDecision.combine(AccessDecision oldDecision, AccessDecision newDecision)	Rules: - `null` values are ignored, - any DENY means DENY, - any DEFAULT means DEFAULT, - otherwise, only ALLOW remains, leading to ALLOW.

Uses of AccessDecision in com.evolveum.midpoint.schema.expression

Methods in com.evolveum.midpoint.schema.expression that return AccessDecision

Modifier and Type	Method	Description
@NotNull AccessDecision	BulkActionsProfile.decideActionAccess(@NotNull String legacyActionName, @Nullable String configurationElementName)
@NotNull AccessDecision	ScriptLanguageExpressionProfile.decideClassAccess(String className, String methodName)
@NotNull AccessDecision	FunctionLibrariesProfile.decideFunctionAccess(@NotNull String libraryOid, @NotNull String functionName)
@NotNull AccessDecision	ScriptLanguageExpressionProfile.decidePackageAccess(String packageName)
@NotNull AccessDecision	BulkActionProfile.decision()	Returns the value of the decision record component.
@NotNull AccessDecision	FunctionLibraryProfile.defaultDecision()	Returns the value of the defaultDecision record component.
@NotNull AccessDecision	ExpressionEvaluatorProfile.getDecision()
@NotNull AccessDecision	AbstractSecurityProfile.getDefaultDecision()
@NotNull AccessDecision	ExpressionEvaluatorsProfile.getDefaultDecision()
@NotNull AccessDecision	ScriptLanguageExpressionProfile.getDefaultDecision()
@NotNull AccessDecision	ExpressionProfile.getPrivilegeElevation()

Methods in com.evolveum.midpoint.schema.expression that return types with arguments of type AccessDecision

Modifier and Type	Method	Description
@NotNull Map<String,AccessDecision>	FunctionLibraryProfile.functionProfileMap()	Returns the value of the functionProfileMap record component.

Methods in com.evolveum.midpoint.schema.expression with parameters of type AccessDecision

Modifier and Type	Method	Description
void	ExpressionPermissionProfile.addClassAccessRule(Class<?> clazz, AccessDecision decision)
void	ExpressionPermissionProfile.addClassAccessRule(Class<?> clazz, String methodName, AccessDecision decision)	Used to easily set up access for built-in class access rules (convenience).
static ExpressionPermissionProfile	ExpressionPermissionProfile.closed(@NotNull String identifier, @NotNull AccessDecision defaultDecision, @NotNull List<ExpressionPermissionPackageProfileType> packageProfiles, @NotNull List<ExpressionPermissionClassProfileType> classProfiles)	Creates frozen profile.
static ExpressionPermissionProfile	ExpressionPermissionProfile.open(@NotNull String identifier, @NotNull AccessDecision defaultDecision)	Creates semi-frozen profile (lists are open).

Constructors in com.evolveum.midpoint.schema.expression with parameters of type AccessDecision

Modifier	Constructor	Description
	BulkActionProfile(@NotNull String action, @NotNull AccessDecision decision)	Creates an instance of a BulkActionProfile record class.
	ExpressionEvaluatorProfile(@NotNull QName type, @NotNull AccessDecision decision, @NotNull List<ScriptLanguageExpressionProfile> scriptLanguageProfiles)
	ExpressionEvaluatorsProfile(@NotNull AccessDecision defaultDecision, @NotNull List<ExpressionEvaluatorProfile> evaluatorProfiles)
	ExpressionProfile(@NotNull String identifier, @NotNull ExpressionEvaluatorsProfile evaluatorsProfile, @NotNull BulkActionsProfile bulkActionsProfile, @NotNull FunctionLibrariesProfile librariesProfile, @NotNull AccessDecision privilegeElevation)
	FunctionLibraryProfile(@NotNull String libraryOid, @NotNull AccessDecision defaultDecision, @NotNull Map<String,AccessDecision> functionProfileMap)	Creates an instance of a FunctionLibraryProfile record class.
	ScriptLanguageExpressionProfile(@NotNull String language, @NotNull AccessDecision defaultDecision, boolean typeChecking, @Nullable ExpressionPermissionProfile permissionProfile)

Constructor parameters in com.evolveum.midpoint.schema.expression with type arguments of type AccessDecision

Modifier	Constructor	Description
	FunctionLibraryProfile(@NotNull String libraryOid, @NotNull AccessDecision defaultDecision, @NotNull Map<String,AccessDecision> functionProfileMap)	Creates an instance of a FunctionLibraryProfile record class.

Uses of AccessDecision in com.evolveum.midpoint.security.enforcer.api

Methods in com.evolveum.midpoint.security.enforcer.api that return AccessDecision

Modifier and Type	Method	Description
@NotNull AccessDecision	SecurityEnforcer.decideAccess(@Nullable MidPointPrincipal principal, @NotNull String operationUrl, @Nullable AuthorizationPhaseType phase, @NotNull AbstractAuthorizationParameters params, @NotNull SecurityEnforcer.Options options, @NotNull Task task, @NotNull OperationResult result)	General access-decision method.
default <O extends ObjectType, T extends ObjectType> @NotNull AccessDecision	SecurityEnforcer.decideAccess(@Nullable MidPointPrincipal principal, @NotNull Collection<String> operationUrls, @NotNull AuthorizationParameters<O,T> params, @NotNull Task task, @NotNull OperationResult result)	Simple access control decision similar to that used by spring security.
default @NotNull AccessDecision	SecurityEnforcer.decideAccess(@Nullable MidPointPrincipal principal, @NotNull Collection<String> operationUrls, @NotNull Task task, @NotNull OperationResult result)	Simplified version of SecurityEnforcer.decideAccess(MidPointPrincipal, Collection, AuthorizationParameters, Task, OperationResult).
<O extends ObjectType> AccessDecision	SecurityEnforcer.determineItemDecision(@NotNull ObjectSecurityConstraints securityConstraints, @NotNull ObjectDelta<O> delta, PrismObject<O> currentObject, @NotNull String operationUrl, @NotNull AuthorizationPhaseType phase, @NotNull ItemPath itemPath)	Determines the access to given item (e.g.
<C extends Containerable> AccessDecision	SecurityEnforcer.determineItemValueDecision(@NotNull ObjectSecurityConstraints securityConstraints, @NotNull PrismContainerValue<C> containerValue, @NotNull String operationUrl, @NotNull AuthorizationPhaseType phase, boolean consideringCreation, @NotNull String decisionContextDesc)	Determines the access to given value (`containerValue`) carrying e.g. an assignment.
@NotNull AccessDecision	PrismEntityOpConstraints.getDecision()	Returns the access decision for the current element: - either definite (ALLOW or DENY) - or not definite (DEFAULT.