org.apache.jackrabbit.core.security.authorization.acl
Class ACLEditor

java.lang.Object
  org.apache.jackrabbit.core.SecurityItemModifier
      org.apache.jackrabbit.core.security.authorization.acl.ACLEditor

All Implemented Interfaces:

AccessControlConstants, AccessControlEditor

public class ACLEditor
extends SecurityItemModifier
implements AccessControlEditor, AccessControlConstants

ACLEditor...

Field Summary

Fields inherited from interface org.apache.jackrabbit.core.security.authorization.AccessControlConstants

N_ACCESSCONTROL, N_POLICY, NF, NT_REP_ACCESS_CONTROL, NT_REP_ACCESS_CONTROLLABLE, NT_REP_ACE, NT_REP_ACL, NT_REP_DENY_ACE, NT_REP_GRANT_ACE, P_PRINCIPAL_NAME, P_PRIVILEGES

Method Summary

AccessControlPolicy[]	editAccessControlPolicies(java.security.Principal principal) Returns an array of editable policies for the given principal.
AccessControlPolicy[]	editAccessControlPolicies(java.lang.String nodePath) Retrieves the editable policies for the Node identified by the given nodePath.
AccessControlPolicy[]	getPolicies(java.lang.String nodePath) Retrieves the policies for the Node identified by the given nodePath.
protected static Name	getUniqueNodeName(javax.jcr.Node node, java.lang.String name) Create a unique valid name for the Permission nodes to be save.
void	removePolicy(java.lang.String nodePath, AccessControlPolicy policy) Removes the specified policy from the node at nodePath.
void	setPolicy(java.lang.String nodePath, AccessControlPolicy policy) Stores the policy template to the respective node.

Methods inherited from class org.apache.jackrabbit.core.SecurityItemModifier

addSecurityNode, removeSecurityItem, setSecurityProperty, setSecurityProperty

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

getPolicies

public AccessControlPolicy[] getPolicies(java.lang.String nodePath)
                                  throws AccessControlException,
                                         javax.jcr.PathNotFoundException,
                                         javax.jcr.RepositoryException

Description copied from interface: AccessControlEditor

Retrieves the policies for the Node identified by the given nodePath. In contrast to AccessControlEditor.editAccessControlPolicies(java.lang.String) this method returns an empty array if no policy has been applied before by calling AccessControlEditor.setPolicy(java.lang.String, org.apache.jackrabbit.api.jsr283.security.AccessControlPolicy)). Still the returned policies are detached from the AccessControlProvider and are only an external representation. Modification will therefore not take effect, until they are written back to the editor and persisted.

Compared to the policy returned by AccessControlProvider.getEffectivePolicies(org.apache.jackrabbit.spi.Path), the scope of the policies it limited to the Node itself and does not take inherited elements into account.

Specified by:

getPolicies in interface AccessControlEditor

Parameters:

nodePath -

Returns:

the policies applied so far or an empty array if no policy has been applied to the node before.

Throws:

AccessControlException - If the Node identified by the given nodePath does not allow access control modifications (e.g. the node itself stores the access control information for its parent).

javax.jcr.PathNotFoundException - if no node exists for the given nodePath.

javax.jcr.RepositoryException - if an error occurs

See Also:

AccessControlEditor.getPolicies(String)

editAccessControlPolicies

public AccessControlPolicy[] editAccessControlPolicies(java.lang.String nodePath)
                                                throws AccessControlException,
                                                       javax.jcr.PathNotFoundException,
                                                       javax.jcr.RepositoryException

Description copied from interface: AccessControlEditor

Retrieves the editable policies for the Node identified by the given nodePath. If the node does not yet have any policy set an new (empty) 'template' is created (see also AccessControlEditor.getPolicies(String).
The AccessControlPolicy objects returned are detached from the underlying AccessControlProvider and is only an external representation. Modification will therefore not take effect, until a modified policy is written back to the editor and persisted.

Compared to the policies returned by AccessControlProvider.getEffectivePolicies(org.apache.jackrabbit.spi.Path), the scope of the policies returned by this methods it limited to the Node itself and does never not take inherited elements into account.

Specified by:

editAccessControlPolicies in interface AccessControlEditor

Parameters:

nodePath -

Returns:

an array of editable access control policies.

Throws:

AccessControlException - If the Node identified by the given nodePath does not allow access control modifications.

javax.jcr.PathNotFoundException - if no node exists for the given nodePath.

javax.jcr.RepositoryException - if an error occurs

See Also:

AccessControlEditor.editAccessControlPolicies(String)

editAccessControlPolicies

public AccessControlPolicy[] editAccessControlPolicies(java.security.Principal principal)
                                                throws javax.jcr.AccessDeniedException,
                                                       AccessControlException,
                                                       javax.jcr.RepositoryException

Description copied from interface: AccessControlEditor

Returns an array of editable policies for the given principal.

Specified by:

editAccessControlPolicies in interface AccessControlEditor

Returns:

an array of editable policies for the given principal.

Throws:

AccessControlException - if the specified principal does not exist, if this implementation cannot provide policies for individual principals or if same other access control related exception occurs.

javax.jcr.RepositoryException - if another error occurs.

javax.jcr.AccessDeniedException

See Also:

AccessControlEditor.editAccessControlPolicies(Principal)

setPolicy

public void setPolicy(java.lang.String nodePath,
                      AccessControlPolicy policy)
               throws javax.jcr.RepositoryException

Description copied from interface: AccessControlEditor

Stores the policy template to the respective node.

Specified by:

setPolicy in interface AccessControlEditor

Parameters:

nodePath - Absolute path to an existing node object.

policy - the AccessControlPolicy to store.

Throws:

AccessControlException - If the policy is null or if it is not applicable to the Node identified by the given nodePath.

javax.jcr.PathNotFoundException - if no node exists for the given nodePath.

javax.jcr.RepositoryException - if an other error occurs.

See Also:

AccessControlEditor.setPolicy(String,AccessControlPolicy)

removePolicy

public void removePolicy(java.lang.String nodePath,
                         AccessControlPolicy policy)
                  throws AccessControlException,
                         javax.jcr.RepositoryException

Description copied from interface: AccessControlEditor

Removes the specified policy from the node at nodePath.

Specified by:

removePolicy in interface AccessControlEditor

Parameters:

nodePath - Absolute path to an existing node object.

policy - The policy to be removed at nodePath.

Throws:

AccessControlException - If the Node identified by the given nodePath does not allow policy modifications or does not have the specified policy attached.

javax.jcr.PathNotFoundException - if no node exists for the given nodePath.

javax.jcr.RepositoryException - if an other error occurs

See Also:

AccessControlEditor.removePolicy(String,AccessControlPolicy)

getUniqueNodeName

protected static Name getUniqueNodeName(javax.jcr.Node node,
                                        java.lang.String name)
                                 throws javax.jcr.RepositoryException

Create a unique valid name for the Permission nodes to be save.

Parameters:

node - a name for the child is resolved

name - if missing the DEFAULT_ACE_NAME is taken

Returns:

Throws:

javax.jcr.RepositoryException