Package org.camunda.bpm.engine.impl.db
Class AuthorizationCheck
java.lang.Object
org.camunda.bpm.engine.impl.db.AuthorizationCheck
- All Implemented Interfaces:
Serializable
Input for the authorization check algorithm
- Author:
- Daniel Meyer
- See Also:
-
Field Summary
Modifier and TypeFieldDescriptionprotected int
the default permissions to use if no matching authorization can be found.the ids of the groups to check permissions forprotected String
the id of the user to check permissions forprotected boolean
protected boolean
If true authorization check is enabled.protected boolean
Indicates if the revoke authorization checks are enabled or not.protected CompositePermissionCheck
protected boolean
If true authorization check is performed.protected boolean
-
Constructor Summary
ConstructorDescriptionAuthorizationCheck
(String authUserId, List<String> authGroupIds, CompositePermissionCheck permissionCheck, boolean isRevokeAuthorizationCheckEnabled) -
Method Summary
Modifier and TypeMethodDescriptionvoid
addAtomicPermissionCheck
(PermissionCheck permissionCheck) int
boolean
boolean
is used by myBatisboolean
boolean
Used in SQL mappingprotected boolean
boolean
boolean
void
setAtomicPermissionChecks
(List<PermissionCheck> permissionChecks) void
setAuthDefaultPerm
(int authDefaultPerm) void
setAuthGroupIds
(List<String> authGroupIds) void
setAuthorizationCheckEnabled
(boolean isAuthorizationCheckPerformed) void
setAuthUserId
(String authUserId) void
setHistoricInstancePermissionsEnabled
(boolean historicInstancePermissionsEnabled) void
setPermissionChecks
(CompositePermissionCheck permissionChecks) void
setRevokeAuthorizationCheckEnabled
(boolean isRevokeAuthorizationCheckEnabled) void
setShouldPerformAuthorizatioCheck
(boolean shouldPerformAuthorizatioCheck) void
setUseLeftJoin
(boolean useLeftJoin) boolean
-
Field Details
-
isAuthorizationCheckEnabled
protected boolean isAuthorizationCheckEnabledIf true authorization check is enabled. for This switch is useful when implementing a query which may perform an authorization check only under certain circumstances. -
shouldPerformAuthorizatioCheck
protected boolean shouldPerformAuthorizatioCheckIf true authorization check is performed. -
isRevokeAuthorizationCheckEnabled
protected boolean isRevokeAuthorizationCheckEnabledIndicates if the revoke authorization checks are enabled or not. The authorization checks without checking revoke permissions are much more faster. -
authUserId
the id of the user to check permissions for -
authGroupIds
the ids of the groups to check permissions for -
authDefaultPerm
protected int authDefaultPermthe default permissions to use if no matching authorization can be found. -
permissionChecks
-
historicInstancePermissionsEnabled
protected boolean historicInstancePermissionsEnabled -
useLeftJoin
protected boolean useLeftJoin
-
-
Constructor Details
-
AuthorizationCheck
public AuthorizationCheck() -
AuthorizationCheck
public AuthorizationCheck(String authUserId, List<String> authGroupIds, CompositePermissionCheck permissionCheck, boolean isRevokeAuthorizationCheckEnabled)
-
-
Method Details
-
isAuthorizationCheckEnabled
public boolean isAuthorizationCheckEnabled() -
getIsAuthorizationCheckEnabled
public boolean getIsAuthorizationCheckEnabled() -
setAuthorizationCheckEnabled
public void setAuthorizationCheckEnabled(boolean isAuthorizationCheckPerformed) -
shouldPerformAuthorizatioCheck
public boolean shouldPerformAuthorizatioCheck() -
getShouldPerformAuthorizatioCheck
public boolean getShouldPerformAuthorizatioCheck()is used by myBatis -
setShouldPerformAuthorizatioCheck
public void setShouldPerformAuthorizatioCheck(boolean shouldPerformAuthorizatioCheck) -
isPermissionChecksEmpty
protected boolean isPermissionChecksEmpty() -
getAuthUserId
-
setAuthUserId
-
getAuthGroupIds
-
setAuthGroupIds
-
getAuthDefaultPerm
public int getAuthDefaultPerm() -
setAuthDefaultPerm
public void setAuthDefaultPerm(int authDefaultPerm) -
getPermissionChecks
-
setAtomicPermissionChecks
-
addAtomicPermissionCheck
-
setPermissionChecks
-
isRevokeAuthorizationCheckEnabled
public boolean isRevokeAuthorizationCheckEnabled() -
setRevokeAuthorizationCheckEnabled
public void setRevokeAuthorizationCheckEnabled(boolean isRevokeAuthorizationCheckEnabled) -
setHistoricInstancePermissionsEnabled
public void setHistoricInstancePermissionsEnabled(boolean historicInstancePermissionsEnabled) -
isHistoricInstancePermissionsEnabled
public boolean isHistoricInstancePermissionsEnabled()Used in SQL mapping -
isUseLeftJoin
public boolean isUseLeftJoin() -
setUseLeftJoin
public void setUseLeftJoin(boolean useLeftJoin)
-