mirror of
https://github.com/Alfresco/alfresco-community-repo.git
synced 2025-07-24 17:32:48 +00:00
Backing out stuff that should have gone on its own branch.
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@6890 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
This commit is contained in:
@@ -1,92 +0,0 @@
|
||||
/*
|
||||
* Copyright (C) 2005-2007 Alfresco Software Limited.
|
||||
*
|
||||
* This program is free software; you can redistribute it and/or
|
||||
* modify it under the terms of the GNU General Public License
|
||||
* as published by the Free Software Foundation; either version 2
|
||||
* of the License, or (at your option) any later version.
|
||||
|
||||
* This program is distributed in the hope that it will be useful,
|
||||
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
* GNU General Public License for more details.
|
||||
|
||||
* You should have received a copy of the GNU General Public License
|
||||
* along with this program; if not, write to the Free Software
|
||||
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
|
||||
|
||||
* As a special exception to the terms and conditions of version 2.0 of
|
||||
* the GPL, you may redistribute this Program in connection with Free/Libre
|
||||
* and Open Source Software ("FLOSS") applications as described in Alfresco's
|
||||
* FLOSS exception. You should have recieved a copy of the text describing
|
||||
* the FLOSS exception, and it is also available here:
|
||||
* http://www.alfresco.com/legal/licensing
|
||||
*/
|
||||
|
||||
package org.alfresco.service.simple.permission;
|
||||
|
||||
import java.io.Serializable;
|
||||
import java.util.Set;
|
||||
|
||||
/**
|
||||
* Interface for ACLs. ACLs express the capabilities granted to
|
||||
* different authorities (users, groups, or roles (one hopes that roles can go away as they are
|
||||
* operationally just another name for a group)). ACLs contain explicit entries made of
|
||||
* a capability and a list of agents plus an indication of whether the entry denies or allows
|
||||
* the capability. Entries that deny override any entries that allow.
|
||||
* @author britt
|
||||
*/
|
||||
public interface ACL extends Serializable
|
||||
{
|
||||
/**
|
||||
* Insert an allow entry.
|
||||
* Removes any denials explicitly for the authorities and capability given.
|
||||
* @param capability The capability to grant.
|
||||
* @param authorities The authorities granted the capability.
|
||||
*/
|
||||
public void allow(String capability, String ... authorities);
|
||||
|
||||
/**
|
||||
* Insert a deny entry.
|
||||
* Removes any allows explicitly for the authorities and capability given.
|
||||
* @param capability The capability to deny.
|
||||
* @param authorities The authorities to deny.
|
||||
*/
|
||||
public void deny(String capability, String ... authorities);
|
||||
|
||||
/**
|
||||
* Does the given authority have the given capability
|
||||
* @param authority The authority (user)
|
||||
* @param isOwner Is the authority the owner of the controlled entity.
|
||||
* @param capability The capability.
|
||||
* @return Whether the authority can.
|
||||
*/
|
||||
public boolean can(String authority, boolean isOwner, String capability);
|
||||
|
||||
/**
|
||||
* Get the capabilities for the given authority.
|
||||
* @param authority The authority.
|
||||
* @param isOwner is the authority the owner of the controlled entity.
|
||||
* @return A set of capabilities.
|
||||
*/
|
||||
public Set<String> getCapabilities(String authority, boolean isOwner);
|
||||
|
||||
/**
|
||||
* Get the authorities with the given capability.
|
||||
* @param capability The capability under consideration.
|
||||
* @return The set of authorities.
|
||||
*/
|
||||
public Set<String> getAllowed(String capability);
|
||||
|
||||
/**
|
||||
* Get a string representation of this ACL, suitable for persistence.
|
||||
* @return The string representation.
|
||||
*/
|
||||
public String getStringRepresentation();
|
||||
|
||||
/**
|
||||
* Should this ACL be inherited.
|
||||
* @return Whether it should.
|
||||
*/
|
||||
public boolean inherits();
|
||||
}
|
@@ -1,121 +0,0 @@
|
||||
/*
|
||||
* Copyright (C) 2005-2007 Alfresco Software Limited.
|
||||
*
|
||||
* This program is free software; you can redistribute it and/or
|
||||
* modify it under the terms of the GNU General Public License
|
||||
* as published by the Free Software Foundation; either version 2
|
||||
* of the License, or (at your option) any later version.
|
||||
|
||||
* This program is distributed in the hope that it will be useful,
|
||||
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
* GNU General Public License for more details.
|
||||
|
||||
* You should have received a copy of the GNU General Public License
|
||||
* along with this program; if not, write to the Free Software
|
||||
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
|
||||
|
||||
* As a special exception to the terms and conditions of version 2.0 of
|
||||
* the GPL, you may redistribute this Program in connection with Free/Libre
|
||||
* and Open Source Software ("FLOSS") applications as described in Alfresco's
|
||||
* FLOSS exception. You should have recieved a copy of the text describing
|
||||
* the FLOSS exception, and it is also available here:
|
||||
* http://www.alfresco.com/legal/licensing
|
||||
*/
|
||||
|
||||
package org.alfresco.service.simple.permission;
|
||||
|
||||
import java.util.Set;
|
||||
|
||||
/**
|
||||
* Interface for a registry of capabilities.
|
||||
* @author britt
|
||||
*/
|
||||
public interface AuthorityCapabilityRegistry
|
||||
{
|
||||
/**
|
||||
* Get all known capabilities.
|
||||
* @return A list of all the capabilities.
|
||||
*/
|
||||
public Set<String> getAllCapabilities();
|
||||
|
||||
/**
|
||||
* Get all authorities know to the system.
|
||||
* @return
|
||||
*/
|
||||
public Set<String> getAllAuthorities();
|
||||
|
||||
/**
|
||||
* Get the integer id corresponding to the given capability.
|
||||
* @return The id.
|
||||
*/
|
||||
public int getCapabilityID(String capability);
|
||||
|
||||
/**
|
||||
* Get the name of a capability from it's unique id.
|
||||
* @param id
|
||||
* @return The capability name or null if the id is invalid.
|
||||
*/
|
||||
public String getCapabilityName(int id);
|
||||
|
||||
/**
|
||||
* Add a capability.
|
||||
* @param capability
|
||||
*/
|
||||
public void addCapability(String capability);
|
||||
|
||||
/**
|
||||
* Get the id for an authority.
|
||||
* @param authority
|
||||
* @return The id for the authority.
|
||||
*/
|
||||
public int getAuthorityID(String authority);
|
||||
|
||||
/**
|
||||
* Get the name from an authority id.
|
||||
* @param id The authority id.
|
||||
* @return The authority name.
|
||||
*/
|
||||
public String getAuthorityName(int id);
|
||||
|
||||
/**
|
||||
* Add a new authority.
|
||||
* @param authority The authority name.
|
||||
* @param parent The parent authority. May be null.
|
||||
*/
|
||||
public void addAuthority(String authority, String parent);
|
||||
|
||||
/**
|
||||
* Remove an authority completely from the system.
|
||||
* @param authority The authority to move.
|
||||
*/
|
||||
public void removeAuthority(String authority);
|
||||
|
||||
/**
|
||||
* Remove a containment relationship.
|
||||
* @param parent The parent.
|
||||
* @param child The child.
|
||||
*/
|
||||
public void removeAuthorityChild(String parent, String child);
|
||||
|
||||
/**
|
||||
* Get all authorities which are contained directly or transitively by the given authority.
|
||||
* @param authority The authority to check.
|
||||
* @return The contained authorities.
|
||||
*/
|
||||
public Set<String> getContainedAuthorities(String authority);
|
||||
|
||||
/**
|
||||
* Get all authorities which directly or indirectly contain the given authority.
|
||||
* @param authority The authority to check.
|
||||
* @return The container authorities.
|
||||
*/
|
||||
public Set<String> getContainerAuthorities(String authority);
|
||||
|
||||
/**
|
||||
* Get the case normalized version of authority.
|
||||
* @param authority The authority.
|
||||
* @return The case normalized version.
|
||||
*/
|
||||
public String normalizeAuthority(String authority);
|
||||
}
|
@@ -1,73 +0,0 @@
|
||||
/*
|
||||
* Copyright (C) 2005-2007 Alfresco Software Limited.
|
||||
*
|
||||
* This program is free software; you can redistribute it and/or
|
||||
* modify it under the terms of the GNU General Public License
|
||||
* as published by the Free Software Foundation; either version 2
|
||||
* of the License, or (at your option) any later version.
|
||||
|
||||
* This program is distributed in the hope that it will be useful,
|
||||
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
* GNU General Public License for more details.
|
||||
|
||||
* You should have received a copy of the GNU General Public License
|
||||
* along with this program; if not, write to the Free Software
|
||||
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
|
||||
|
||||
* As a special exception to the terms and conditions of version 2.0 of
|
||||
* the GPL, you may redistribute this Program in connection with Free/Libre
|
||||
* and Open Source Software ("FLOSS") applications as described in Alfresco's
|
||||
* FLOSS exception. You should have recieved a copy of the text describing
|
||||
* the FLOSS exception, and it is also available here:
|
||||
* http://www.alfresco.com/legal/licensing
|
||||
*/
|
||||
|
||||
package org.alfresco.service.simple.permission;
|
||||
|
||||
import java.util.List;
|
||||
|
||||
/**
|
||||
* Interface for a simple permission mechanism.
|
||||
* Nothing but String valued capabilities, and ACLs.
|
||||
* @author britt
|
||||
*/
|
||||
public interface SimplePermissionService
|
||||
{
|
||||
/**
|
||||
* Can the current user perform the action indicated by the capability.
|
||||
* @param capability The capability: marker for an ability to perform an action
|
||||
* governed by an ACL.
|
||||
* @param acl The ACL. If this is null then the permission is granted.
|
||||
* @param owner The owner. The owner can always has the "changepermission" capability.
|
||||
* @return Whether permission is granted.
|
||||
*/
|
||||
boolean can(String capability, ACL acl, String owner);
|
||||
|
||||
/**
|
||||
* Can the user (agent) specified perform the action indicated by the capability.
|
||||
* @param agent The agent (user) to check.
|
||||
* @param capability The capability to check.
|
||||
* @param acl The ACL. If this is null then the permission is granted.
|
||||
* @param owner The owner.
|
||||
* @return Whether permission is granted.
|
||||
*/
|
||||
boolean can(String agent, String capability, ACL acl, String owner);
|
||||
|
||||
/**
|
||||
* Get the capabilities that this acl grants the current user.
|
||||
* @param acl The ACL.
|
||||
* @param owner The owner of the controlled entity.
|
||||
* @return A list of capabilities.
|
||||
*/
|
||||
List<String> getCapabilities(ACL acl, String owner);
|
||||
|
||||
/**
|
||||
* Get the capabilities that this agent grants the specifiec agent.
|
||||
* @param agent The agent (user).
|
||||
* @param acl The ACL.
|
||||
* @param owner The owner of the controlled entity.
|
||||
* @return A list of capabilities.
|
||||
*/
|
||||
List<String> getCapabilities(String agent, ACL acl, String owner);
|
||||
}
|
Reference in New Issue
Block a user