public class WebACService extends Object implements AccessControlService
AccessControlService implementation, based on the rules defined by WebAC.| Modifier and Type | Class and Description |
|---|---|
static class |
WebACService.NoopAuthorizationCache |
static interface |
WebACService.TrellisAuthorizationCache
A
CacheService that can be used for authorization information. |
| Modifier and Type | Field and Description |
|---|---|
static String |
CONFIG_WEBAC_MEMBERSHIP_CHECK
The configuration key controlling whether to check member resources at the AuthZ enforcement point.
|
| Constructor and Description |
|---|
WebACService()
Create a WebAC-based authorization service.
|
WebACService(ResourceService resourceService)
Create a WebAC-based authorization service.
|
WebACService(ResourceService resourceService,
CacheService<String,Set<IRI>> cache)
Create a WebAC-based authorization service.
|
WebACService(ResourceService resourceService,
CacheService<String,Set<IRI>> cache,
boolean checkMembershipResources)
Create a WebAC-based authorization service.
|
| Modifier and Type | Method and Description |
|---|---|
Set<IRI> |
getAccessModes(IRI identifier,
Session session)
Get the allowable access modes for the given session
to the specified resource.
|
public static final String CONFIG_WEBAC_MEMBERSHIP_CHECK
@Inject public WebACService()
public WebACService(ResourceService resourceService)
resourceService - the resource servicepublic WebACService(ResourceService resourceService, @WebACService.TrellisAuthorizationCache CacheService<String,Set<IRI>> cache)
resourceService - the resource servicecache - a cachepublic WebACService(ResourceService resourceService, CacheService<String,Set<IRI>> cache, boolean checkMembershipResources)
resourceService - the resource servicecache - a cachecheckMembershipResources - whether to check membership resource permissions (default=false)public Set<IRI> getAccessModes(IRI identifier, Session session)
AccessControlServicegetAccessModes in interface AccessControlServiceidentifier - the resource identifiersession - the agent's session