|
||||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | |||||||||
SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |
java.lang.Objectorg.kuali.kfs.sec.service.impl.AccessSecurityServiceImpl
public class AccessSecurityServiceImpl
AccessSecurityService
Field Summary | |
---|---|
protected ContractsAndGrantsModuleService |
contractsAndGrantsModuleService
|
protected org.kuali.rice.kns.service.DataDictionaryService |
dataDictionaryService
|
protected org.kuali.rice.kns.service.ParameterService |
parameterService
|
protected org.kuali.rice.kim.service.PermissionService |
permissionService
|
protected org.kuali.rice.kim.service.RoleManagementService |
roleManagementService
|
Constructor Summary | |
---|---|
AccessSecurityServiceImpl()
|
Method Summary | |
---|---|
void |
applySecurityRestrictions(List<? extends org.kuali.rice.kns.bo.BusinessObject> results,
org.kuali.rice.kim.bo.Person person,
String templateId,
org.kuali.rice.kim.bo.types.dto.AttributeSet additionalPermissionDetails)
Retrieves any setup security permissions for the given person and evaluates against List of business objects. |
void |
applySecurityRestrictionsForGLInquiry(List<? extends org.kuali.rice.kns.bo.BusinessObject> results,
org.kuali.rice.kim.bo.Person person)
Retrieves any setup security permissions (with gl inquiry template) for the given person and evaluates against List of business objects. |
void |
applySecurityRestrictionsForLaborInquiry(List<? extends org.kuali.rice.kns.bo.BusinessObject> results,
org.kuali.rice.kim.bo.Person person)
Retrieves any setup security permissions (with ld inquiry template) for the given person and evaluates against List of business objects. |
void |
applySecurityRestrictionsForLookup(List<? extends org.kuali.rice.kns.bo.BusinessObject> results,
org.kuali.rice.kim.bo.Person person)
Retrieves any setup security permissions (with lookup template) for the given person and evaluates against List of business objects. |
boolean |
canEditDocument(AccountingDocument document,
org.kuali.rice.kim.bo.Person person)
Checks edit access on all accounting lines contained on the document for given user |
boolean |
canEditDocumentAccountingLine(AccountingDocument document,
AccountingLine accountingLine,
org.kuali.rice.kim.bo.Person person)
Checks any edit access security permissions setup for the user and for accounting lines of the given document type |
boolean |
canEditDocumentAccountingLine(AccountingDocument document,
AccountingLine accountingLine,
org.kuali.rice.kim.bo.Person person,
AccessSecurityRestrictionInfo restrictionInfo)
Checks any edit access security permissions setup for the user and for accounting lines of the given document type |
boolean |
canViewDocument(AccountingDocument document,
org.kuali.rice.kim.bo.Person person,
AccessSecurityRestrictionInfo restrictionInfo)
Checks view access on all accounting lines contained on the document for given user |
boolean |
canViewDocumentAccountingLine(AccountingDocument document,
AccountingLine accountingLine,
org.kuali.rice.kim.bo.Person person)
Checks any view access security permissions setup for the user and for accounting lines of the given document type |
boolean |
canViewDocumentNotesAttachments(AccountingDocument document,
org.kuali.rice.kim.bo.Person person)
Checks access is allowed to view document notes based on the document's accounting lines |
protected boolean |
checkForEditLineOverrides(AccountingDocument document,
AccountingLine line,
org.kuali.rice.kim.bo.Person person)
Checks parameter overrides for edit line permission. |
protected boolean |
checkForViewDocumentOverrides(AccountingDocument document,
org.kuali.rice.kim.bo.Person person)
Checks parameter overrides for view document permission. |
protected boolean |
checkForViewLineOverrides(AccountingDocument document,
AccountingLine line,
org.kuali.rice.kim.bo.Person person)
Checks parameter overrides for view line permission. |
protected boolean |
checkForWorkflowRoutingRequests(AccountingDocument document,
org.kuali.rice.kim.bo.Person person)
Checks for any workflow requests (approve, acknowledge, fyi) for the document to the given person |
boolean |
checkSecurityRestrictionsForBusinessObject(org.kuali.rice.kns.bo.BusinessObject businessObject,
org.kuali.rice.kim.bo.Person person,
AccessSecurityRestrictionInfo restrictionInfo)
Retrieves any access security permissions that are assigned to the user and applicable for the given business object, then evaluates permissions against the business object instance |
protected AccessPermissionEvaluator |
constructAccessPermissionEvaluator(Class<? extends AccessPermissionEvaluator> accessPermissionEvaluatorClass,
org.kuali.rice.kim.bo.types.dto.AttributeSet attributeSet,
Map<String,Object> otherKeyValues,
org.kuali.rice.kim.bo.Person person)
Constructs a new instance of the AccessPermissionEvaluator class and sets the constraint, operator, and value based on the given qualification |
protected boolean |
evaluateSecurityOnAccountingLinesByTemplate(AccountingDocument document,
org.kuali.rice.kim.bo.Person person,
String templateId,
AccessSecurityRestrictionInfo restrictionInfo)
Iterates through source and target accounting lines for the given document and evaluates any permissions with the given template id against the accounting line values |
protected boolean |
evaluateSecurityPermissions(Class<? extends AccessPermissionEvaluator> accessPermissionEvaluatorClass,
List<org.kuali.rice.kim.bo.role.dto.KimPermissionInfo> permissions,
String value,
org.kuali.rice.kim.bo.Person person,
Map<String,Object> otherKeyValues)
Checks whether the given value is allowed based on the given permissions and user |
protected boolean |
evaluateSecurityPermissionsByTemplate(org.kuali.rice.kns.bo.BusinessObject businessObject,
Class entryClass,
org.kuali.rice.kim.bo.Person person,
String templateId,
org.kuali.rice.kim.bo.types.dto.AttributeSet additionalPermissionDetails,
AccessSecurityRestrictionInfo restrictionInfo)
Validates any security permissions setup for the user and attributes of the class against the business object values |
protected org.kuali.rice.kim.bo.types.dto.AttributeSet |
getDocumentTypeDetail(AccountingDocument document)
Constructs a new AttributeSet and adds document type name detail with value from document instance |
String |
getEditAccountingLineWithFieldValueTemplateId()
Gets the Edit Accounting Line With Field Value Template Id. |
String |
getEditDocumentWithFieldValueTemplateId()
Gets the Edit Document With Field Value Template Id. |
String |
getInquiryWithFieldValueTemplateId()
Gets the Inquiry With Field Value Template Id. |
String |
getLookupWithFieldValueTemplateId()
Gets the Lookup With Field Value Template Id. |
String |
getViewAccountingLineWithFieldValueTemplateId()
Gets the View Accounting Line With Field Value Template Id. |
String |
getViewDocumentWithFieldValueTemplateId()
Gets the View Document With Field Values template ID. |
String |
getViewNotesAttachmentsWithFieldValueTemplateId()
Gets the View Notes Attachments With Field Value Template Id. |
protected boolean |
isAccessSecurityEnabled()
Helper method to check system parameter that turns access security on/off |
void |
setContractsAndGrantsModuleService(ContractsAndGrantsModuleService contractsAndGrantsModuleService)
Sets the contractsAndGrantsModuleService attribute value. |
void |
setDataDictionaryService(org.kuali.rice.kns.service.DataDictionaryService dataDictionaryService)
Sets the dataDictionaryService attribute value. |
void |
setParameterService(org.kuali.rice.kns.service.ParameterService parameterService)
Sets the parameterService attribute value. |
void |
setPermissionService(org.kuali.rice.kim.service.PermissionService permissionService)
Sets the permissionService attribute value. |
void |
setRoleManagementService(org.kuali.rice.kim.service.RoleManagementService roleManagementService)
Sets the roleManagementService attribute value. |
Methods inherited from class java.lang.Object |
---|
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait |
Field Detail |
---|
protected org.kuali.rice.kns.service.DataDictionaryService dataDictionaryService
protected org.kuali.rice.kns.service.ParameterService parameterService
protected org.kuali.rice.kim.service.PermissionService permissionService
protected org.kuali.rice.kim.service.RoleManagementService roleManagementService
protected ContractsAndGrantsModuleService contractsAndGrantsModuleService
Constructor Detail |
---|
public AccessSecurityServiceImpl()
Method Detail |
---|
public void applySecurityRestrictionsForGLInquiry(List<? extends org.kuali.rice.kns.bo.BusinessObject> results, org.kuali.rice.kim.bo.Person person)
AccessSecurityService
applySecurityRestrictionsForGLInquiry
in interface AccessSecurityService
results
- List of business object instances with data to checkperson
- Person to apply security forAccessSecurityService.applySecurityRestrictionsForGLInquiry(java.util.List,
org.kuali.rice.kim.bo.Person)
public void applySecurityRestrictionsForLaborInquiry(List<? extends org.kuali.rice.kns.bo.BusinessObject> results, org.kuali.rice.kim.bo.Person person)
AccessSecurityService
applySecurityRestrictionsForLaborInquiry
in interface AccessSecurityService
results
- List of business object instances with data to checkperson
- Person to apply security forAccessSecurityService.applySecurityRestrictionsForLaborInquiry(java.util.List,
org.kuali.rice.kim.bo.Person)
public void applySecurityRestrictionsForLookup(List<? extends org.kuali.rice.kns.bo.BusinessObject> results, org.kuali.rice.kim.bo.Person person)
AccessSecurityService
applySecurityRestrictionsForLookup
in interface AccessSecurityService
results
- List of business object instances with data to checkperson
- Person to apply security forAccessSecurityService.applySecurityRestrictionsForLookup(java.util.List,
org.kuali.rice.kim.bo.Person)
public void applySecurityRestrictions(List<? extends org.kuali.rice.kns.bo.BusinessObject> results, org.kuali.rice.kim.bo.Person person, String templateId, org.kuali.rice.kim.bo.types.dto.AttributeSet additionalPermissionDetails)
AccessSecurityService
applySecurityRestrictions
in interface AccessSecurityService
results
- List of business object instances with data to checkperson
- Person to apply security fortemplateId
- KIM template id for permissions to checkadditionalPermissionDetails
- Any additional details that should be matched on when retrieving permissionsAccessSecurityService.applySecurityRestrictions(java.util.List, org.kuali.rice.kim.bo.Person,
java.lang.String, org.kuali.rice.kim.bo.types.dto.AttributeSet)
public boolean checkSecurityRestrictionsForBusinessObject(org.kuali.rice.kns.bo.BusinessObject businessObject, org.kuali.rice.kim.bo.Person person, AccessSecurityRestrictionInfo restrictionInfo)
AccessSecurityService
checkSecurityRestrictionsForBusinessObject
in interface AccessSecurityService
businessObject
- BusinessObject instance to check access permissions againstperson
- Person to retrieve access permissions forrestrictionInfo
- Object providing information on a restriction if one is found
AccessSecurityService.checkSecurityRestrictionsForBusinessObject(org.kuali.rice.kns.bo.BusinessObject,
org.kuali.rice.kim.bo.Person, org.kuali.kfs.sec.businessobject.AccessSecurityRestrictionInfo)
public boolean canEditDocument(AccountingDocument document, org.kuali.rice.kim.bo.Person person)
AccessSecurityService
canEditDocument
in interface AccessSecurityService
document
- AccountingDocument instance with accounting lines to check, doc type of instance is used for retrieving
permissionsperson
- the user who we are checking access for
AccessSecurityService.canEditDocument(org.kuali.kfs.sys.document.AccountingDocument,
org.kuali.rice.kim.bo.Person)
public boolean canEditDocumentAccountingLine(AccountingDocument document, AccountingLine accountingLine, org.kuali.rice.kim.bo.Person person, AccessSecurityRestrictionInfo restrictionInfo)
AccessSecurityService
canEditDocumentAccountingLine
in interface AccessSecurityService
document
- AccountingDocument instance that contains the line to be validated, doc type of instance is used for
retrieving permissionsaccountingLine
- AccountingLine instance with values to checkperson
- the user who we are checking access forrestrictionInfo
- Object providing information on a restriction if one is found
AccessSecurityService.canEditDocumentAccountingLine(org.kuali.kfs.sys.document.AccountingDocument,
org.kuali.kfs.sys.businessobject.AccountingLine, org.kuali.rice.kim.bo.Person,
org.kuali.kfs.sec.businessobject.AccessSecurityRestrictionInfo)
public boolean canEditDocumentAccountingLine(AccountingDocument document, AccountingLine accountingLine, org.kuali.rice.kim.bo.Person person)
AccessSecurityService
canEditDocumentAccountingLine
in interface AccessSecurityService
document
- AccountingDocument instance that contains the line to be validated, doc type of instance is used for
retrieving permissionsaccountingLine
- AccountingLine instance with values to checkperson
- the user who we are checking access for
AccessSecurityService.canEditDocumentAccountingLine(org.kuali.kfs.sys.document.AccountingDocument,
org.kuali.kfs.sys.businessobject.AccountingLine, org.kuali.rice.kim.bo.Person)
public boolean canViewDocument(AccountingDocument document, org.kuali.rice.kim.bo.Person person, AccessSecurityRestrictionInfo restrictionInfo)
AccessSecurityService
canViewDocument
in interface AccessSecurityService
document
- AccountingDocument instance with accounting lines to check, doc type of instance is used for retrieving
permissionsperson
- the user who we are checking access forrestrictionInfo
- Object providing information on a restriction if one is found
AccessSecurityService.canViewDocument(org.kuali.kfs.sys.document.AccountingDocument,
org.kuali.rice.kim.bo.Person, org.kuali.kfs.sec.businessobject.AccessSecurityRestrictionInfo)
public boolean canViewDocumentAccountingLine(AccountingDocument document, AccountingLine accountingLine, org.kuali.rice.kim.bo.Person person)
AccessSecurityService
canViewDocumentAccountingLine
in interface AccessSecurityService
document
- AccountingDocument that contains the line to be validated, doc type of instance is used for retrieving
permissionsaccountingLine
- AccountingLine instance with values to checkperson
- the user who we are checking access for
AccessSecurityService.canViewDocumentAccountingLine(org.kuali.kfs.sys.document.AccountingDocument,
org.kuali.kfs.sys.businessobject.AccountingLine, org.kuali.rice.kim.bo.Person)
public boolean canViewDocumentNotesAttachments(AccountingDocument document, org.kuali.rice.kim.bo.Person person)
AccessSecurityService
canViewDocumentNotesAttachments
in interface AccessSecurityService
document
- AccountingDocument instance with accounting lines to check, doc type of instance is used for retrieving
permissionsperson
- the user who we are checking access for
AccessSecurityService.canViewDocumentNotesAttachments(org.kuali.kfs.sys.document.AccountingDocument,
org.kuali.rice.kim.bo.Person)
protected boolean evaluateSecurityOnAccountingLinesByTemplate(AccountingDocument document, org.kuali.rice.kim.bo.Person person, String templateId, AccessSecurityRestrictionInfo restrictionInfo)
document
- AccountingDocument instance with accounting lines to check, doc type of instance is used for retrieving
permissionsperson
- the user who we are checking access fortemplateId
- KIM template id for the permissions to checkrestrictionInfo
- Object providing information on a restriction if one is found
protected boolean checkForWorkflowRoutingRequests(AccountingDocument document, org.kuali.rice.kim.bo.Person person)
document
- Document to check for routing requestsperson
- Person to check for routing requests
protected boolean checkForViewDocumentOverrides(AccountingDocument document, org.kuali.rice.kim.bo.Person person)
document
- Document that we are checking permissions forperson
- Person we are checking permissions for
protected boolean checkForViewLineOverrides(AccountingDocument document, AccountingLine line, org.kuali.rice.kim.bo.Person person)
document
- Document that we are checking permissions forperson
- Person we are checking permissions forline
- AccountingLine we are checking permissions for
protected boolean checkForEditLineOverrides(AccountingDocument document, AccountingLine line, org.kuali.rice.kim.bo.Person person)
document
- Document that we are checking permissions forperson
- Person we are checking permissions forline
- AccountingLine we are checking permissions for
protected boolean evaluateSecurityPermissionsByTemplate(org.kuali.rice.kns.bo.BusinessObject businessObject, Class entryClass, org.kuali.rice.kim.bo.Person person, String templateId, org.kuali.rice.kim.bo.types.dto.AttributeSet additionalPermissionDetails, AccessSecurityRestrictionInfo restrictionInfo)
businessObject
- instance with attribute values to validateentryClass
- Class of business object to pull attribute restrictions forperson
- the user who we are checking access fortemplateId
- type of security permissions to checkadditionalPermissionDetails
- any additional details that should be used for retrieving permissionsrestrictionInfo
- Object providing information on a restriction if one is found
protected org.kuali.rice.kim.bo.types.dto.AttributeSet getDocumentTypeDetail(AccountingDocument document)
document
- AccountingDocument instance which document type will be set from
protected boolean evaluateSecurityPermissions(Class<? extends AccessPermissionEvaluator> accessPermissionEvaluatorClass, List<org.kuali.rice.kim.bo.role.dto.KimPermissionInfo> permissions, String value, org.kuali.rice.kim.bo.Person person, Map<String,Object> otherKeyValues)
accessPermissionEvaluatorClass
- Class of type AccessPermissionEvaluator that will be used to evaluate the security
restrictionpermissions
- List of permissions to evaluatevalue
- the value that will be checkedperson
- the user who we are checking access forotherKeyValues
- Map for other key field name/value pairs
protected AccessPermissionEvaluator constructAccessPermissionEvaluator(Class<? extends AccessPermissionEvaluator> accessPermissionEvaluatorClass, org.kuali.rice.kim.bo.types.dto.AttributeSet attributeSet, Map<String,Object> otherKeyValues, org.kuali.rice.kim.bo.Person person)
accessPermissionEvaluatorClass
- Class to create instance of (must implement AccessPermissionEvaluator interface)attributeSet
- AttributeSet containing the qualifier valuesotherKeyValues
- Map for other key field name/value pairsperson
- Person who permission should be evaluated for
AccessPermissionEvaluator
protected boolean isAccessSecurityEnabled()
public void setDataDictionaryService(org.kuali.rice.kns.service.DataDictionaryService dataDictionaryService)
dataDictionaryService
- The dataDictionaryService to set.public void setParameterService(org.kuali.rice.kns.service.ParameterService parameterService)
parameterService
- The parameterService to set.public void setPermissionService(org.kuali.rice.kim.service.PermissionService permissionService)
permissionService
- The permissionService to set.public void setRoleManagementService(org.kuali.rice.kim.service.RoleManagementService roleManagementService)
roleManagementService
- The roleManagementService to set.public void setContractsAndGrantsModuleService(ContractsAndGrantsModuleService contractsAndGrantsModuleService)
contractsAndGrantsModuleService
- The contractsAndGrantsModuleService to set.public String getEditAccountingLineWithFieldValueTemplateId()
AccessSecurityService
getEditAccountingLineWithFieldValueTemplateId
in interface AccessSecurityService
AccessSecurityService.getEditAccountingLineWithFieldValueTemplateId()
public String getEditDocumentWithFieldValueTemplateId()
AccessSecurityService
getEditDocumentWithFieldValueTemplateId
in interface AccessSecurityService
AccessSecurityService.getEditDocumentWithFieldValueTemplateId()
public String getInquiryWithFieldValueTemplateId()
AccessSecurityService
getInquiryWithFieldValueTemplateId
in interface AccessSecurityService
AccessSecurityService.getInquiryWithFieldValueTemplateId()
public String getLookupWithFieldValueTemplateId()
AccessSecurityService
getLookupWithFieldValueTemplateId
in interface AccessSecurityService
AccessSecurityService.getLookupWithFieldValueTemplateId()
public String getViewAccountingLineWithFieldValueTemplateId()
AccessSecurityService
getViewAccountingLineWithFieldValueTemplateId
in interface AccessSecurityService
AccessSecurityService.getViewAccountingLineWithFieldValueTemplateId()
public String getViewDocumentWithFieldValueTemplateId()
AccessSecurityService
getViewDocumentWithFieldValueTemplateId
in interface AccessSecurityService
AccessSecurityService.getViewDocumentWithFieldValueTemplateId()
public String getViewNotesAttachmentsWithFieldValueTemplateId()
AccessSecurityService
getViewNotesAttachmentsWithFieldValueTemplateId
in interface AccessSecurityService
AccessSecurityService.getViewNotesAttachmentsWithFieldValueTemplateId()
|
||||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | |||||||||
SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |