org.restsql.security

Interface Authorizer

public interface Authorizer

Authorizes restSQL requests.

Author:

Mark Sawers

Method Summary

Methods

Modifier and Type	Method and Description
String	dumpConfig() Returns implementation configuration, e.g.
boolean	isAuthorizationEnabled() Returns true if authorization is enabled.
boolean	isAuthorized(SecurityContext context, Request.Type requestType, String sqlResource) Checks if user is assigned a role that may perform the request.
boolean	isAuthorized(SecurityContext context, Request request) Checks if user is assigned a role that may perform the request.

Method Detail

isAuthorizationEnabled

boolean isAuthorizationEnabled()

Returns true if authorization is enabled.

isAuthorized

boolean isAuthorized(SecurityContext context,
                   Request request)

Checks if user is assigned a role that may perform the request.

Parameters:

context - security context, usually container-provided

request - SQL Resource request

Returns:

true if user is authorized (or authorization is disabled), false otherwise

isAuthorized

boolean isAuthorized(SecurityContext context,
                   Request.Type requestType,
                   String sqlResource)

Checks if user is assigned a role that may perform the request.

Parameters:

context - security context, usually container-provided

requestType - request type

sqlResource - SQL resource name

Returns:

true if user is authorized (or authorization is disabled), false otherwise

dumpConfig

String dumpConfig()

Returns implementation configuration, e.g. data store location as well as a string representation of all roles and associated privileges.