org.kuali.kfs.sec.document.authorization
Class SecTransactionalDocumentAuthorizer

java.lang.Object
  org.kuali.kfs.sec.document.authorization.SecTransactionalDocumentAuthorizer

All Implemented Interfaces:

org.kuali.rice.kns.authorization.BusinessObjectAuthorizer, org.kuali.rice.kns.document.authorization.DocumentAuthorizer, org.kuali.rice.kns.document.authorization.TransactionalDocumentAuthorizer

public class SecTransactionalDocumentAuthorizer
extends Object
implements org.kuali.rice.kns.document.authorization.TransactionalDocumentAuthorizer

TransactionDocumentAuthorizer that wraps access security checks around another TransactionDocumentAuthorizer configured for the document type

Field Summary

protected org.kuali.rice.kns.document.authorization.TransactionalDocumentAuthorizer

documentAuthorizer

Constructor Summary

SecTransactionalDocumentAuthorizer()

Method Summary

boolean	canAddNoteAttachment(org.kuali.rice.kns.document.Document document, String attachmentTypeCode, org.kuali.rice.kim.bo.Person user)
boolean	canDeleteNoteAttachment(org.kuali.rice.kns.document.Document document, String attachmentTypeCode, String createdBySelfOnly, org.kuali.rice.kim.bo.Person user)
boolean	canInitiate(String documentTypeName, org.kuali.rice.kim.bo.Person user)
boolean	canOpen(org.kuali.rice.kns.document.Document document, org.kuali.rice.kim.bo.Person user) If user has open permission then does further checks to verify there are no access security restriction setup that prevents the user from opening the document
boolean	canReceiveAdHoc(org.kuali.rice.kns.document.Document document, org.kuali.rice.kim.bo.Person user, String actionRequestCode)
boolean	canSendAdHocRequests(org.kuali.rice.kns.document.Document document, String actionRequestCd, org.kuali.rice.kim.bo.Person user)
boolean	canViewNoteAttachment(org.kuali.rice.kns.document.Document document, String attachmentTypeCode, org.kuali.rice.kim.bo.Person user) If user has permission to view notes/attachments then does further checks to verify there are no access security restriction setup that prevents the user from viewing the notes/attachments
Map<String,String>	getCollectionItemPermissionDetails(org.kuali.rice.kns.bo.BusinessObject collectionItemBusinessObject)
Map<String,String>	getCollectionItemRoleQualifications(org.kuali.rice.kns.bo.BusinessObject collectionItemBusinessObject)
Set<String>	getDocumentActions(org.kuali.rice.kns.document.Document document, org.kuali.rice.kim.bo.Person user, Set<String> documentActions) If there are line restrictions and the initiator override flag is turned on, we need to disable the copy and error correct buttons since those would result in documents displaying the restricted lines
Set<String>	getEditModes(org.kuali.rice.kns.document.Document document, org.kuali.rice.kim.bo.Person user, Set<String> editModes)
boolean	isAuthorized(org.kuali.rice.kns.bo.BusinessObject businessObject, String namespaceCode, String permissionName, String principalId)
boolean	isAuthorized(org.kuali.rice.kns.bo.BusinessObject businessObject, String namespaceCode, String permissionName, String principalId, Map<String,String> additionalPermissionDetails, Map<String,String> additionalRoleQualifiers)
boolean	isAuthorizedByTemplate(org.kuali.rice.kns.bo.BusinessObject businessObject, String namespaceCode, String permissionTemplateName, String principalId)
boolean	isAuthorizedByTemplate(org.kuali.rice.kns.bo.BusinessObject businessObject, String namespaceCode, String permissionTemplateName, String principalId, Map<String,String> additionalPermissionDetails, Map<String,String> additionalRoleQualifiers)
void	setDocumentAuthorizer(org.kuali.rice.kns.document.authorization.TransactionalDocumentAuthorizer documentAuthorizer) Sets the documentAuthorizer attribute value.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

documentAuthorizer

protected org.kuali.rice.kns.document.authorization.TransactionalDocumentAuthorizer documentAuthorizer

Constructor Detail

SecTransactionalDocumentAuthorizer

public SecTransactionalDocumentAuthorizer()

Method Detail

getEditModes

public Set<String> getEditModes(org.kuali.rice.kns.document.Document document,
                                org.kuali.rice.kim.bo.Person user,
                                Set<String> editModes)

Specified by:

getEditModes in interface org.kuali.rice.kns.document.authorization.TransactionalDocumentAuthorizer

canAddNoteAttachment

public boolean canAddNoteAttachment(org.kuali.rice.kns.document.Document document,
                                    String attachmentTypeCode,
                                    org.kuali.rice.kim.bo.Person user)

Specified by:

canAddNoteAttachment in interface org.kuali.rice.kns.document.authorization.DocumentAuthorizer

canDeleteNoteAttachment

public boolean canDeleteNoteAttachment(org.kuali.rice.kns.document.Document document,
                                       String attachmentTypeCode,
                                       String createdBySelfOnly,
                                       org.kuali.rice.kim.bo.Person user)

Specified by:

canDeleteNoteAttachment in interface org.kuali.rice.kns.document.authorization.DocumentAuthorizer

canInitiate

public boolean canInitiate(String documentTypeName,
                           org.kuali.rice.kim.bo.Person user)

Specified by:

canInitiate in interface org.kuali.rice.kns.document.authorization.DocumentAuthorizer

canOpen

public boolean canOpen(org.kuali.rice.kns.document.Document document,
                       org.kuali.rice.kim.bo.Person user)

If user has open permission then does further checks to verify there are no access security restriction setup that prevents the user from opening the document

Specified by:

canOpen in interface org.kuali.rice.kns.document.authorization.DocumentAuthorizer

See Also:

DocumentAuthorizer.canOpen(org.kuali.rice.kns.document.Document, org.kuali.rice.kim.bo.Person)

canReceiveAdHoc

public boolean canReceiveAdHoc(org.kuali.rice.kns.document.Document document,
                               org.kuali.rice.kim.bo.Person user,
                               String actionRequestCode)

Specified by:

canReceiveAdHoc in interface org.kuali.rice.kns.document.authorization.DocumentAuthorizer

canSendAdHocRequests

public boolean canSendAdHocRequests(org.kuali.rice.kns.document.Document document,
                                    String actionRequestCd,
                                    org.kuali.rice.kim.bo.Person user)

Specified by:

canSendAdHocRequests in interface org.kuali.rice.kns.document.authorization.DocumentAuthorizer

canViewNoteAttachment

public boolean canViewNoteAttachment(org.kuali.rice.kns.document.Document document,
                                     String attachmentTypeCode,
                                     org.kuali.rice.kim.bo.Person user)

If user has permission to view notes/attachments then does further checks to verify there are no access security restriction setup that prevents the user from viewing the notes/attachments

Specified by:

canViewNoteAttachment in interface org.kuali.rice.kns.document.authorization.DocumentAuthorizer

See Also:

DocumentAuthorizer.canViewNoteAttachment(org.kuali.rice.kns.document.Document, java.lang.String, org.kuali.rice.kim.bo.Person)

getDocumentActions

public Set<String> getDocumentActions(org.kuali.rice.kns.document.Document document,
                                      org.kuali.rice.kim.bo.Person user,
                                      Set<String> documentActions)

If there are line restrictions and the initiator override flag is turned on, we need to disable the copy and error correct buttons since those would result in documents displaying the restricted lines

Specified by:

getDocumentActions in interface org.kuali.rice.kns.document.authorization.DocumentAuthorizer

See Also:

DocumentAuthorizer.getDocumentActions(org.kuali.rice.kns.document.Document, org.kuali.rice.kim.bo.Person, java.util.Set)

getCollectionItemPermissionDetails

public Map<String,String> getCollectionItemPermissionDetails(org.kuali.rice.kns.bo.BusinessObject collectionItemBusinessObject)

Specified by:

getCollectionItemPermissionDetails in interface org.kuali.rice.kns.authorization.BusinessObjectAuthorizer

getCollectionItemRoleQualifications

public Map<String,String> getCollectionItemRoleQualifications(org.kuali.rice.kns.bo.BusinessObject collectionItemBusinessObject)

Specified by:

getCollectionItemRoleQualifications in interface org.kuali.rice.kns.authorization.BusinessObjectAuthorizer

isAuthorized

public boolean isAuthorized(org.kuali.rice.kns.bo.BusinessObject businessObject,
                            String namespaceCode,
                            String permissionName,
                            String principalId)

Specified by:

isAuthorized in interface org.kuali.rice.kns.authorization.BusinessObjectAuthorizer

isAuthorized

public boolean isAuthorized(org.kuali.rice.kns.bo.BusinessObject businessObject,
                            String namespaceCode,
                            String permissionName,
                            String principalId,
                            Map<String,String> additionalPermissionDetails,
                            Map<String,String> additionalRoleQualifiers)

Specified by:

isAuthorized in interface org.kuali.rice.kns.authorization.BusinessObjectAuthorizer

isAuthorizedByTemplate

public boolean isAuthorizedByTemplate(org.kuali.rice.kns.bo.BusinessObject businessObject,
                                      String namespaceCode,
                                      String permissionTemplateName,
                                      String principalId)

Specified by:

isAuthorizedByTemplate in interface org.kuali.rice.kns.authorization.BusinessObjectAuthorizer

isAuthorizedByTemplate

public boolean isAuthorizedByTemplate(org.kuali.rice.kns.bo.BusinessObject businessObject,
                                      String namespaceCode,
                                      String permissionTemplateName,
                                      String principalId,
                                      Map<String,String> additionalPermissionDetails,
                                      Map<String,String> additionalRoleQualifiers)

Specified by:

isAuthorizedByTemplate in interface org.kuali.rice.kns.authorization.BusinessObjectAuthorizer

setDocumentAuthorizer

public void setDocumentAuthorizer(org.kuali.rice.kns.document.authorization.TransactionalDocumentAuthorizer documentAuthorizer)

Sets the documentAuthorizer attribute value.

Parameters:

documentAuthorizer - The documentAuthorizer to set.