org.restsql.security.impl

Class AuthorizerImpl

java.lang.Object

org.restsql.security.impl.AuthorizerImpl

All Implemented Interfaces:

Authorizer

public class AuthorizerImpl
extends Object
implements Authorizer

Authorizes restSQL requests using privileges properties file, which maps roles to request types on SQL Resources. If privileges properties are not defined or not able to load, authorization is disabled. In that case, isAuthorized() always returns true.

Author:

Mark Sawers

Constructor Summary

Constructors

Constructor and Description
AuthorizerImpl() For use by the Factory.

Method Summary

Methods

Modifier and Type	Method and Description
String	dumpConfig() Returns status message and string representation of all roles and associated privileges.
boolean	isAuthorizationEnabled() Returns true if authorization is enabled.
boolean	isAuthorized(SecurityContext context, Request.Type requestType, String sqlResource) Returns true if user is authorized (or authorization is disabled), false otherwise.
boolean	isAuthorized(SecurityContext context, Request request) Checks if user is assigned a role that may perform the request.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AuthorizerImpl

public AuthorizerImpl()

For use by the Factory. Uses properties file specified in standard restSQL properties.

Method Detail

isAuthorizationEnabled

public boolean isAuthorizationEnabled()

Returns true if authorization is enabled.

Specified by:

isAuthorizationEnabled in interface Authorizer

dumpConfig

public String dumpConfig()

Returns status message and string representation of all roles and associated privileges.

Specified by:

dumpConfig in interface Authorizer

isAuthorized

public boolean isAuthorized(SecurityContext context,
                   Request request)

Description copied from interface: Authorizer

Checks if user is assigned a role that may perform the request.

Specified by:

isAuthorized in interface Authorizer

Parameters:

context - security context, usually container-provided

request - SQL Resource request

Returns:

true if user is authorized (or authorization is disabled), false otherwise

isAuthorized

public boolean isAuthorized(SecurityContext context,
                   Request.Type requestType,
                   String sqlResource)

Returns true if user is authorized (or authorization is disabled), false otherwise.

Specified by:

isAuthorized in interface Authorizer

Parameters:

context - security context, usually container-provided

requestType - request type

sqlResource - SQL resource name

Returns:

true if user is authorized (or authorization is disabled), false otherwise