Home >> All >> net >> sf >> acegisecurity >> [ acl Javadoc ]

•	net.sf.acegisecurity.acl.basic.* (17)	•	net.sf.acegisecurity.acl.basic.cache.* (3)
•	net.sf.acegisecurity.acl.basic.jdbc.* (2)

• net.sf.acegisecurity.acl: Javadoc index of package net.sf.acegisecurity.acl.


Package Samples:

• net.sf.acegisecurity.acl.basic: Enables retrieval of access control lists (ACLs) for domain object instances.  
• net.sf.acegisecurity.acl.basic.jdbc: Access control list implementation based on integer bit masks.  
• net.sf.acegisecurity.acl.basic.cache: Access control list implementation based on integer bit masks.  

Classes:

• BasicAclProvider: Retrieves access control lists (ACL) entries for domain object instances from a data access object (DAO). This implementation will provide ACL lookup services for any object that it can determine the AclObjectIdentity for by calling the obtainIdentity(Object) 55 method. Subclasses can override this method if they only want the BasicAclProvider responding to particular domain object instances. BasicAclProvider will walk an inheritance hierarchy if a BasicAclEntry returned by the DAO indicates it has a parent. NB: inheritance occurs at a domain instance object level. It does not occur at an ACL recipient ...
• GrantedAuthorityEffectiveAclsResolver: Simple implementation of EffectiveAclsResolver . This implementation does not need to understand the "recipient" types presented in a BasicAclEntry because it merely delegates to the detected Authentication.getPrincipal() > Authentication.getPrincipal() 55 or Authentication.getAuthorities() > Authentication.getAuthorities() 55 . The principal object or granted authorities object has its Object.equals(recipient) method called to make the decision as to whether the recipient in the BasicAclEntry is the same as the principal or granted authority. This class should prove an adequate ACLs resolver if ...
• EffectiveAclsResolver: Determines the ACLs that are effective for a given Authentication object. Implementations will vary depending on their ability to interpret the "recipient" object types contained in BasicAclEntry instances, and how those recipient object types correspond to Authentication -presented principals and granted authorities. Implementations should not filter the resulting ACL list from lower-order permissions. So if a resulting ACL list grants a "read" permission, an "unlimited" permission and a "zero" permission (due to the effective ACLs for different granted authorities held by the Authentication object), ...
• JdbcExtendedDaoImpl: Extension of the base JdbcDaoImpl , which implements net.sf.acegisecurity.acl.basic.BasicAclExtendedDao . A default database structure is assumed. This may be overridden by setting the default query strings to use. This implementation works with String based recipients and net.sf.acegisecurity.acl.basic.NamedEntityObjectIdentity only. The latter can be changed by overriding convertAclObjectIdentityToString(AclObjectIdentity) 55 .
• AclObjectIdentity: Interface representing the identity of an individual domain object instance. It should be noted that AclObjectIdentity instances are created in various locations throughout the package. As AclObjectIdentity s are used as the key for caching, it is essential that implementations provide methods so that object-equality rather than reference-equality can be relied upon by caches. In other words, a cache can consider two AclObjectIdentity s equal if identity1.equals(identity2) , rather than reference-equality of identity1==identity2 . In practical terms this means you must implement the standard java.lang.Object ...
• BasicAclDao: Represents a data access object that can return the BasicAclEntry s applying to a given ACL object identity. BasicAclDao implementations are responsible for interpreting a given AclObjectIdentity and being able to lookup and return the corresponding BasicAclEntry []s. BasicAclDao s many, but are not required to, allow the backend ACL repository to specify the class of BasicAclEntry implementations that should be returned.
• JdbcDaoImpl: Retrieves ACL details from a JDBC location. A default database structure is assumed. This may be overridden by setting the default query strings to use. If this does not provide enough flexibility, another strategy would be to subclass this class and override the org.springframework.jdbc.object.MappingSqlQuery instance used, via the initMappingSqlQueries() 55 extension point.
• AclObjectIdentityAware: Indicates a domain object instance is able to provide AclObjectIdentity information. Domain objects must implement this interface if they wish to provide an AclObjectIdentity rather than it being determined by relying classes. Specifically, the BasicAclProvider detects and uses this interface.
• BasicAclEntryCache: Provides a cache of BasicAclEntry objects. Implementations should provide appropriate methods to set their cache parameters (eg time-to-live) and/or force removal of entities before their normal expiration. These are not part of the BasicAclEntryCache interface contract because they vary depending on the type of caching system used (eg in-memory vs disk vs cluster vs hybrid).
• BasicAclEntryHolder: Used by EhCacheBasedAclEntryCache to store the array of BasicAclEntry s in the cache. This is necessary because caches store a single object per key, not an array. This class uses value object semantics. ie: construction-based initialisation without any setters for the properties.
• BasicAclExtendedDao: Represents a more extensive data access object for BasicAclEntry s. BasicAclExtendedDao implementations are responsible for interpreting a a given AclObjectIdentity .
• AclProviderManager: Iterates through a list of AclProvider s to locate the ACLs that apply to a given domain object instance. If no compatible provider is found, it is assumed that no ACLs apply for the specified domain object instance and null is returned.
• NamedEntityObjectIdentity: Simple implementation of AclObjectIdentity . Uses String s to store the identity of the domain object instance. Also offers a constructor that uses reflection to build the identity information.
• AclProvider: Indicates a class can process a given domain object instance and authoritatively return the ACLs that apply. Implementations are typically called from the AclProviderManager .
• AbstractBasicAclEntry: Abstract implementation of BasicAclEntry . Provides core bit mask handling methods.
• NullAclEntryCache: Does not perform any caching. Do not use in production settings , as ACL queries are likely to be extensive.
• EhCacheBasedAclEntryCache: Caches BasicAclEntry s using a Spring IoC defined EHCACHE .
• AclEntry: Marker interface representing an access control list entry associated with a specific domain object instance.
• AclManager: Obtains the AclEntry instances that apply to a particular domain object instance.
• SimpleAclEntry: Stores some privileges typical of a domain object.
• BasicAclEntry: Represents an entry in an access control list.

Home | Contact Us | Privacy Policy | Terms of Service