edu.internet2.middleware.grouper.privs
Class NamingWrapper

java.lang.Object
  extended by edu.internet2.middleware.grouper.privs.NamingWrapper
All Implemented Interfaces:
NamingResolver

public class NamingWrapper
extends Object
implements NamingResolver

Class implementing wrapper around NamingAdapter interface.

Since:
1.2.1
Version:
$Id: NamingWrapper.java,v 1.18 2009-10-03 13:47:13 shilen Exp $
Author:
blair christensen.

Constructor Summary
NamingWrapper(GrouperSession session, NamingAdapter naming)
          Facade around NamingAdapter that implements NamingResolver.
 
Method Summary
 void flushCache()
          flush cache if caching resolver
 GrouperSession getGrouperSession()
          get a reference to the session
 Set<NamingPrivilege> getPrivileges(Stem stem, edu.internet2.middleware.subject.Subject subject)
          Get all privileges subject has on group.
 Set<Stem> getStemsWhereSubjectDoesntHavePrivilege(String stemId, Stem.Scope scope, edu.internet2.middleware.subject.Subject subject, Privilege privilege, boolean considerAllSubject, String sqlLikeString)
          find the stems which do not have a certain privilege
 Set<Stem> getStemsWhereSubjectHasPrivilege(edu.internet2.middleware.subject.Subject subject, Privilege privilege)
          Get all groups where subject has privilege.
 Set<edu.internet2.middleware.subject.Subject> getSubjectsWithPrivilege(Stem stem, Privilege privilege)
          Get all subjects with privilege on group.
 void grantPrivilege(Stem stem, edu.internet2.middleware.subject.Subject subject, Privilege privilege, String uuid)
          Grant privilege to subject on group.
 boolean hasPrivilege(Stem stem, edu.internet2.middleware.subject.Subject subject, Privilege privilege)
          Check whether subject has privilege on group.
 boolean hqlFilterStemsNotWithPrivWhereClause(edu.internet2.middleware.subject.Subject subject, HqlQuery hqlQuery, StringBuilder hql, String stemColumn, Privilege privilege, boolean considerAllSubject)
          for a stem query, check to make sure the subject cant see the records
 boolean hqlFilterStemsWhereClause(edu.internet2.middleware.subject.Subject subject, HqlQuery hqlQuery, StringBuilder hql, String stemColumn, Set<Privilege> privInSet)
          for a stem query, check to make sure the subject can see the records (if filtering HQL, you can do the postHqlFilterGroups instead if you like).
 Set<Stem> postHqlFilterStems(Set<Stem> stems, edu.internet2.middleware.subject.Subject subject, Set<Privilege> privInSet)
          after HQL is run, filter stems.
 void privilegeCopy(Stem stem1, Stem stem2, Privilege priv)
          Copies privileges for subjects that have the specified privilege on stem1 to stem2.
 void privilegeCopy(edu.internet2.middleware.subject.Subject subj1, edu.internet2.middleware.subject.Subject subj2, Privilege priv)
          Copies privileges of type priv on any subject for the given Subject subj1 to the given Subject subj2.
 void revokeAllPrivilegesForSubject(edu.internet2.middleware.subject.Subject subject)
          Revoke all naming privileges that this subject has.
 void revokePrivilege(Stem stem, Privilege privilege)
          Revoke privilege from all subjects on group.
 void revokePrivilege(Stem stem, edu.internet2.middleware.subject.Subject subject, Privilege privilege)
          Revoke privilege from subject on group.
 void stop()
          clean up resources, session is stopped
 
Methods inherited from class java.lang.Object
equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
 

Constructor Detail

NamingWrapper

public NamingWrapper(GrouperSession session,
                     NamingAdapter naming)
              throws IllegalArgumentException
Facade around NamingAdapter that implements NamingResolver.

Parameters:
session -
naming -
Throws:
IllegalArgumentException - if any parameter is null.
Since:
1.2.1
Method Detail

getStemsWhereSubjectDoesntHavePrivilege

public Set<Stem> getStemsWhereSubjectDoesntHavePrivilege(String stemId,
                                                         Stem.Scope scope,
                                                         edu.internet2.middleware.subject.Subject subject,
                                                         Privilege privilege,
                                                         boolean considerAllSubject,
                                                         String sqlLikeString)
Description copied from interface: NamingResolver
find the stems which do not have a certain privilege

Specified by:
getStemsWhereSubjectDoesntHavePrivilege in interface NamingResolver
Returns:
the stems
See Also:
NamingResolver#getStemsWhereSubjectDoesntHavePrivilege(String, Scope, Subject, Privilege, boolean, String)

flushCache

public void flushCache()
Description copied from interface: NamingResolver
flush cache if caching resolver

Specified by:
flushCache in interface NamingResolver
See Also:
NamingResolver.flushCache()

getGrouperSession

public GrouperSession getGrouperSession()
Description copied from interface: NamingResolver
get a reference to the session

Specified by:
getGrouperSession in interface NamingResolver
Returns:
the session
See Also:
NamingResolver.getGrouperSession()

getStemsWhereSubjectHasPrivilege

public Set<Stem> getStemsWhereSubjectHasPrivilege(edu.internet2.middleware.subject.Subject subject,
                                                  Privilege privilege)
                                           throws IllegalArgumentException
Description copied from interface: NamingResolver
Get all groups where subject has privilege.

Specified by:
getStemsWhereSubjectHasPrivilege in interface NamingResolver
Returns:
set
Throws:
IllegalArgumentException - if any parameter is null.
Since:
1.2.1
See Also:
NamingResolver.getStemsWhereSubjectHasPrivilege(Subject, Privilege), NamingAdapter.getStemsWhereSubjectHasPriv(GrouperSession, Subject, Privilege)

getPrivileges

public Set<NamingPrivilege> getPrivileges(Stem stem,
                                          edu.internet2.middleware.subject.Subject subject)
                                   throws IllegalArgumentException
Description copied from interface: NamingResolver
Get all privileges subject has on group.

Specified by:
getPrivileges in interface NamingResolver
Returns:
set of naming privileges
Throws:
IllegalArgumentException - if any parameter is null.
Since:
1.2.1
See Also:
NamingResolver.getPrivileges(Stem, Subject), NamingAdapter.getPrivs(GrouperSession, Stem, Subject)

getSubjectsWithPrivilege

public Set<edu.internet2.middleware.subject.Subject> getSubjectsWithPrivilege(Stem stem,
                                                                              Privilege privilege)
                                                                       throws IllegalArgumentException
Description copied from interface: NamingResolver
Get all subjects with privilege on group.

Specified by:
getSubjectsWithPrivilege in interface NamingResolver
Returns:
set of subjects
Throws:
IllegalArgumentException - if any parameter is null.
Since:
1.2.1
See Also:
NamingResolver.getSubjectsWithPrivilege(Stem, Privilege), NamingAdapter.getSubjectsWithPriv(GrouperSession, Stem, Privilege)

grantPrivilege

public void grantPrivilege(Stem stem,
                           edu.internet2.middleware.subject.Subject subject,
                           Privilege privilege,
                           String uuid)
                    throws IllegalArgumentException,
                           UnableToPerformException
Description copied from interface: NamingResolver
Grant privilege to subject on group.

Specified by:
grantPrivilege in interface NamingResolver
uuid - if known or null
Throws:
IllegalArgumentException - if any parameter is null.
UnableToPerformException - if the privilege could not be granted.
Since:
1.2.1
See Also:
NamingResolver.grantPrivilege(Stem, Subject, Privilege, String), NamingAdapter.grantPriv(GrouperSession, Stem, Subject, Privilege, String)

hasPrivilege

public boolean hasPrivilege(Stem stem,
                            edu.internet2.middleware.subject.Subject subject,
                            Privilege privilege)
                     throws IllegalArgumentException
Description copied from interface: NamingResolver
Check whether subject has privilege on group.

Specified by:
hasPrivilege in interface NamingResolver
Returns:
if has privilege
Throws:
IllegalArgumentException - if any parameter is null.
Since:
1.2.1
See Also:
NamingResolver.hasPrivilege(Stem, Subject, Privilege), NamingAdapter.hasPriv(GrouperSession, Stem, Subject, Privilege)

revokePrivilege

public void revokePrivilege(Stem stem,
                            Privilege privilege)
                     throws IllegalArgumentException,
                            UnableToPerformException
Description copied from interface: NamingResolver
Revoke privilege from all subjects on group.

Specified by:
revokePrivilege in interface NamingResolver
Throws:
IllegalArgumentException - if any parameter is null.
UnableToPerformException - if the privilege could not be revoked.
Since:
1.2.1
See Also:
NamingResolver.revokePrivilege(Stem, Privilege), NamingAdapter.revokePriv(GrouperSession, Stem, Privilege)

revokePrivilege

public void revokePrivilege(Stem stem,
                            edu.internet2.middleware.subject.Subject subject,
                            Privilege privilege)
                     throws IllegalArgumentException,
                            UnableToPerformException
Description copied from interface: NamingResolver
Revoke privilege from subject on group.

Specified by:
revokePrivilege in interface NamingResolver
Throws:
IllegalArgumentException - if any parameter is null.
UnableToPerformException - if the privilege could not be revoked.
Since:
1.2.1
See Also:
NamingResolver.revokePrivilege(Stem, Subject, Privilege), NamingAdapter.revokePriv(GrouperSession, Stem, Subject, Privilege)

privilegeCopy

public void privilegeCopy(Stem stem1,
                          Stem stem2,
                          Privilege priv)
                   throws IllegalArgumentException,
                          UnableToPerformException
Description copied from interface: NamingResolver
Copies privileges for subjects that have the specified privilege on stem1 to stem2.

Specified by:
privilegeCopy in interface NamingResolver
Throws:
IllegalArgumentException
UnableToPerformException
See Also:
NamingResolver.privilegeCopy(Stem, Stem, Privilege), NamingAdapter.privilegeCopy(GrouperSession, Stem, Stem, Privilege)

privilegeCopy

public void privilegeCopy(edu.internet2.middleware.subject.Subject subj1,
                          edu.internet2.middleware.subject.Subject subj2,
                          Privilege priv)
                   throws IllegalArgumentException,
                          UnableToPerformException
Description copied from interface: NamingResolver
Copies privileges of type priv on any subject for the given Subject subj1 to the given Subject subj2. For instance, if subj1 has STEM privilege to Stem x, this method will result with subj2 having STEM privilege to Stem x.

Specified by:
privilegeCopy in interface NamingResolver
Throws:
IllegalArgumentException
UnableToPerformException
See Also:
NamingResolver.privilegeCopy(Subject, Subject, Privilege), NamingAdapter.privilegeCopy(GrouperSession, Subject, Subject, Privilege)

stop

public void stop()
Description copied from interface: NamingResolver
clean up resources, session is stopped

Specified by:
stop in interface NamingResolver
See Also:
NamingResolver.stop()

hqlFilterStemsWhereClause

public boolean hqlFilterStemsWhereClause(edu.internet2.middleware.subject.Subject subject,
                                         HqlQuery hqlQuery,
                                         StringBuilder hql,
                                         String stemColumn,
                                         Set<Privilege> privInSet)
Description copied from interface: NamingResolver
for a stem query, check to make sure the subject can see the records (if filtering HQL, you can do the postHqlFilterGroups instead if you like). Note, this joins to tables, so the queries should probably be "distinct"

Specified by:
hqlFilterStemsWhereClause in interface NamingResolver
Parameters:
subject - which needs view access to the groups
hql - is the select and part part (hql prefix)
stemColumn - is the name of the stem column to join to
privInSet - find a privilege which is in this set (e.g. for view, send all access privs). There are pre-canned sets in AccessAdapter
Returns:
if the query was changed
See Also:
NamingResolver.hqlFilterStemsWhereClause(edu.internet2.middleware.subject.Subject, edu.internet2.middleware.grouper.hibernate.HqlQuery, java.lang.StringBuilder, java.lang.String, java.util.Set)

postHqlFilterStems

public Set<Stem> postHqlFilterStems(Set<Stem> stems,
                                    edu.internet2.middleware.subject.Subject subject,
                                    Set<Privilege> privInSet)
Description copied from interface: NamingResolver
after HQL is run, filter stems. If you are filtering in HQL, then dont filter here

Specified by:
postHqlFilterStems in interface NamingResolver
subject - which needs view access to the groups
privInSet - find a privilege which is in this set (e.g. for view, send all access privs). There are pre-canned sets in NamingPrivilege
Returns:
the set of filtered groups
See Also:
NamingResolver.postHqlFilterStems(java.util.Set, edu.internet2.middleware.subject.Subject, java.util.Set)

revokeAllPrivilegesForSubject

public void revokeAllPrivilegesForSubject(edu.internet2.middleware.subject.Subject subject)
Description copied from interface: NamingResolver
Revoke all naming privileges that this subject has.

Specified by:
revokeAllPrivilegesForSubject in interface NamingResolver
See Also:
NamingResolver.revokeAllPrivilegesForSubject(edu.internet2.middleware.subject.Subject)

hqlFilterStemsNotWithPrivWhereClause

public boolean hqlFilterStemsNotWithPrivWhereClause(edu.internet2.middleware.subject.Subject subject,
                                                    HqlQuery hqlQuery,
                                                    StringBuilder hql,
                                                    String stemColumn,
                                                    Privilege privilege,
                                                    boolean considerAllSubject)
Description copied from interface: NamingResolver
for a stem query, check to make sure the subject cant see the records

Specified by:
hqlFilterStemsNotWithPrivWhereClause in interface NamingResolver
Parameters:
subject - which needs view access to the groups
hql - the select and current from part
stemColumn - is the name of the group column to join to
privilege - find a privilege which is in this set (e.g. stem or create)
considerAllSubject - if true, then consider GrouperAll when seeign if subject has priv, else do not
Returns:
if the statement was changed
See Also:
NamingResolver.hqlFilterStemsNotWithPrivWhereClause(edu.internet2.middleware.subject.Subject, edu.internet2.middleware.grouper.hibernate.HqlQuery, java.lang.StringBuilder, java.lang.String, Privilege, boolean)