info.magnolia.security.app.util

Class AccessControlPropertyUtil

java.lang.Object

info.magnolia.security.app.util.AccessControlPropertyUtil

public class AccessControlPropertyUtil
extends Object

Utility class for finding a matching permission to the path that want to grant permission when validating.

Constructor Summary

Constructors

Constructor and Description
AccessControlPropertyUtil()

Method Summary

Modifier and Type	Method and Description
static info.magnolia.cms.security.Permission	findBestMatchingPermissions(List<info.magnolia.cms.security.Permission> permissions, String path) Return the best matching permission that matches with path and has equal or greater rights than the ones being granted.
static Set<info.magnolia.cms.security.Permission>	findViolatedPermissions(List<info.magnolia.cms.security.Permission> ownPerms, String grantPath, long grantPermValue) Find potential violating permissions, i.e.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AccessControlPropertyUtil

public AccessControlPropertyUtil()

Method Detail

findBestMatchingPermissions

public static info.magnolia.cms.security.Permission findBestMatchingPermissions(List<info.magnolia.cms.security.Permission> permissions,
                                                                                String path)

Return the best matching permission that matches with path and has equal or greater rights than the ones being granted. The best match permission must have pattern whose length has equal or less than the granted path.

findViolatedPermissions

public static Set<info.magnolia.cms.security.Permission> findViolatedPermissions(List<info.magnolia.cms.security.Permission> ownPerms,
                                                                                 String grantPath,
                                                                                 long grantPermValue)

Find potential violating permissions, i.e. those to sub-paths of the granted path, with lower permission value (restrictions).