org.trellisldp.webac

Class WebACService

java.lang.Object

org.trellisldp.webac.WebACService

All Implemented Interfaces:

AccessControlService

public class WebACService
extends Object
implements AccessControlService

An AccessControlService implementation, based on the rules defined by WebAC.

See Also:

SOLID Web Access Control

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	WebACService.NoopAuthorizationCache
static interface	WebACService.TrellisAuthorizationCache A CacheService that can be used for authorization information.

Field Summary

Fields

Modifier and Type	Field and Description
static String	CONFIG_WEBAC_MEMBERSHIP_CHECK The configuration key controlling whether to check member resources at the AuthZ enforcement point.

Constructor Summary

Constructors

Constructor and Description
WebACService() Create a WebAC-based authorization service.
WebACService(ResourceService resourceService) Create a WebAC-based authorization service.
WebACService(ResourceService resourceService, CacheService<String,Set<IRI>> cache) Create a WebAC-based authorization service.
WebACService(ResourceService resourceService, CacheService<String,Set<IRI>> cache, boolean checkMembershipResources) Create a WebAC-based authorization service.

Method Summary

Modifier and Type	Method and Description
Set<IRI>	getAccessModes(IRI identifier, Session session) Get the allowable access modes for the given session to the specified resource.

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

CONFIG_WEBAC_MEMBERSHIP_CHECK

public static final String CONFIG_WEBAC_MEMBERSHIP_CHECK

The configuration key controlling whether to check member resources at the AuthZ enforcement point.

See Also:

Constant Field Values

Constructor Detail

WebACService

@Inject
public WebACService()

Create a WebAC-based authorization service.

WebACService

public WebACService(ResourceService resourceService)

Create a WebAC-based authorization service.

Parameters:

resourceService - the resource service

WebACService

public WebACService(ResourceService resourceService,
                    @WebACService.TrellisAuthorizationCache
                    CacheService<String,Set<IRI>> cache)

Create a WebAC-based authorization service.

Parameters:

resourceService - the resource service

cache - a cache

WebACService

public WebACService(ResourceService resourceService,
                    CacheService<String,Set<IRI>> cache,
                    boolean checkMembershipResources)

Create a WebAC-based authorization service.

Parameters:

resourceService - the resource service

cache - a cache

checkMembershipResources - whether to check membership resource permissions (default=false)

Method Detail

getAccessModes

public Set<IRI> getAccessModes(IRI identifier,
                               Session session)

Description copied from interface: AccessControlService

Get the allowable access modes for the given session to the specified resource.

Specified by:

getAccessModes in interface AccessControlService

Parameters:

identifier - the resource identifier

session - the agent's session

Returns:

a set of allowable access modes