001 /* 002 * Copyright 2011 The Kuali Foundation. 003 * 004 * Licensed under the Educational Community License, Version 2.0 (the "License"); 005 * you may not use this file except in compliance with the License. 006 * You may obtain a copy of the License at 007 * 008 * http://www.opensource.org/licenses/ecl2.php 009 * 010 * Unless required by applicable law or agreed to in writing, software 011 * distributed under the License is distributed on an "AS IS" BASIS, 012 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 013 * See the License for the specific language governing permissions and 014 * limitations under the License. 015 */ 016 package org.kuali.kfs.sec.service; 017 018 import java.util.Map; 019 020 import org.kuali.rice.kim.bo.Person; 021 022 /** 023 * AccessPermissionEvaluator classes provide the evaluation of a given security permission. Methods are exposed for setting the user's qualification for a permission and method 024 * exposed to pass a value and perform the evaluation 025 */ 026 public interface AccessPermissionEvaluator { 027 028 /** 029 * Evaluates the given value against the permission definition. How the evaluation is carried out depends on implementation 030 * 031 * @param value String value to evaluate 032 * @return True if value is allowed based on the permission definition or false if it is not allowed 033 */ 034 public boolean valueIsAllowed(String value); 035 036 /** 037 * Setter for the constraint code found on the user's qualification record 038 * 039 * @param constraintCode 040 */ 041 public void setConstraintCode(String constraintCode); 042 043 /** 044 * Setter for the operator code found on the user's qualification record 045 * 046 * @param operatorCode 047 */ 048 public void setOperatorCode(String operatorCode); 049 050 /** 051 * Setter for the property value found on the user's qualification record 052 * 053 * @param propertyValue 054 */ 055 public void setPropertyValue(String propertyValue); 056 057 /** 058 * Setter for the Map that holds values for the other key fields (if any) 059 * 060 * @param otherKeyFieldValues Map with field name as the Map key and field value as Map value 061 */ 062 public void setOtherKeyFieldValueMap(Map<String, Object> otherKeyFieldValues); 063 064 /** 065 * Setter for the person who the permission is being evaluated for 066 * 067 * @param person Person kim business object 068 */ 069 public void setPerson(Person person); 070 071 }