org.trellisldp.webac

Class WebAcService

java.lang.Object

org.trellisldp.webac.WebAcService

@ApplicationScoped
public class WebAcService
extends Object

A WebAc implementation, based on the rules defined by SOLID.

See Also:

SOLID Web Access Control

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	WebAcService.NoopAuthorizationCache
static interface	WebAcService.TrellisAuthorizationCache A CacheService that can be used for authorization information.

Field Summary

Fields

Modifier and Type	Field and Description
static String	CONFIG_WEBAC_MEMBERSHIP_CHECK The configuration key controlling whether to check member resources at the AuthZ enforcement point.

Constructor Summary

Constructors

Constructor and Description
WebAcService() Create a WebAC-based authorization service.
WebAcService(ResourceService resourceService) Create a WebAC-based authorization service.
WebAcService(ResourceService resourceService, CacheService<String,Set<IRI>> cache) Create a WebAC-based authorization service.
WebAcService(ResourceService resourceService, CacheService<String,Set<IRI>> cache, boolean checkMembershipResources) Create a WebAC-based authorization service.
WebAcService(ServiceBundler services) Create a WebAC-based authorization service.
WebAcService(ServiceBundler services, CacheService<String,Set<IRI>> cache) Create a WebAC-based authorization service.

Method Summary

Modifier and Type	Method and Description
static String	generateCacheKey(IRI identifier, IRI agent) Generate a key suitable for cache lookups for the given arguments.
Set<IRI>	getAccessModes(IRI identifier, Session session) Get the allowable access modes for the given session to the specified resource.
void	initialize() Initializes the root ACL, if there is no root ACL.

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

CONFIG_WEBAC_MEMBERSHIP_CHECK

public static final String CONFIG_WEBAC_MEMBERSHIP_CHECK

The configuration key controlling whether to check member resources at the AuthZ enforcement point.

See Also:

Constant Field Values

Constructor Detail

WebAcService

public WebAcService()

Create a WebAC-based authorization service.

WebAcService

public WebAcService(ServiceBundler services)

Create a WebAC-based authorization service.

Parameters:

services - the trellis service bundler

WebAcService

@Inject
public WebAcService(ServiceBundler services,
                            @WebAcService.TrellisAuthorizationCache
                            CacheService<String,Set<IRI>> cache)

Create a WebAC-based authorization service.

Parameters:

services - the trellis service bundler

cache - a cache

WebAcService

public WebAcService(ResourceService resourceService)

Create a WebAC-based authorization service.

Parameters:

resourceService - the resource service

WebAcService

public WebAcService(ResourceService resourceService,
                    CacheService<String,Set<IRI>> cache)

Create a WebAC-based authorization service.

Parameters:

resourceService - the resource service

cache - a cache

WebAcService

public WebAcService(ResourceService resourceService,
                    CacheService<String,Set<IRI>> cache,
                    boolean checkMembershipResources)

Create a WebAC-based authorization service.

Parameters:

resourceService - the resource service

cache - a cache

checkMembershipResources - whether to check membership resource permissions (default=false)

Method Detail

initialize

@PostConstruct
public void initialize()

Initializes the root ACL, if there is no root ACL.

getAccessModes

public Set<IRI> getAccessModes(IRI identifier,
                               Session session)

Get the allowable access modes for the given session to the specified resource.

Parameters:

identifier - the resource identifier

session - the agent's session

Returns:

a set of allowable access modes

generateCacheKey

public static String generateCacheKey(IRI identifier,
                                      IRI agent)

Generate a key suitable for cache lookups for the given arguments.

Parameters:

identifier - the resource identifier

agent - the agent identifier

Returns:

a key for cache lookups