Package org.kuali.rice.krad.bo

Interface DataObjectAuthorizer

All Known Subinterfaces:

DocumentAuthorizer, MaintenanceDocumentAuthorizer, TransactionalDocumentAuthorizer

All Known Implementing Classes:

DataObjectAuthorizerBase, DocumentAuthorizerBase, DocumentViewAuthorizerBase, InquiryViewAuthorizerBase, LookupViewAuthorizerBase, MaintenanceDocumentAuthorizerBase, MaintenanceViewAuthorizerBase, TransactionalDocumentAuthorizerBase, TransactionalDocumentViewAuthorizerBase, ViewAuthorizerBase

public interface DataObjectAuthorizer

Invoked to authorize actions requested on data objects (such as edit or view)

Author:

Kuali Rice Team (rice.collab@kuali.org)

Method Summary

Modifier and Type	Method	Description
boolean	isAuthorized(Object dataObject, String namespaceCode, String permissionName, String principalId)	Determines whether the user identified by the given principal ID has the given permission in the context of the data object
boolean	isAuthorized(Object dataObject, String namespaceCode, String permissionName, String principalId, Map<String,String> additionalPermissionDetails, Map<String,String> additionalRoleQualifiers)	Determines whether the user identified by the given principal ID has the given permission in the context of the data object, the additional permission details and role qualifiers are used for the check
boolean	isAuthorizedByTemplate(Object dataObject, String namespaceCode, String permissionTemplateName, String principalId)	Determines whether the user identified by the given principal ID has been granted a permission of the given template in the context of the data object
boolean	isAuthorizedByTemplate(Object dataObject, String namespaceCode, String permissionTemplateName, String principalId, Map<String,String> additionalPermissionDetails, Map<String,String> additionalRoleQualifiers)	Determines whether the user identified by the given principal ID has been granted a permission of the given template in the context of the data object, the additional permission details and role qualifiers are used for the check

Method Details

isAuthorized

boolean isAuthorized(Object dataObject,
 String namespaceCode,
 String permissionName,
 String principalId)

Determines whether the user identified by the given principal ID has the given permission in the context of the data object

Parameters:

dataObject -

namespaceCode -

permissionName -

principalId -

Returns:

boolean true if the user is authorized, false if not

isAuthorizedByTemplate

boolean isAuthorizedByTemplate(Object dataObject,
 String namespaceCode,
 String permissionTemplateName,
 String principalId)

Determines whether the user identified by the given principal ID has been granted a permission of the given template in the context of the data object

Parameters:

dataObject -

namespaceCode -

permissionTemplateName -

principalId -

Returns:

boolean true if the user is authorized, false if not

isAuthorized

boolean isAuthorized(Object dataObject,
 String namespaceCode,
 String permissionName,
 String principalId,
 Map<String,String> additionalPermissionDetails,
 Map<String,String> additionalRoleQualifiers)

Determines whether the user identified by the given principal ID has the given permission in the context of the data object, the additional permission details and role qualifiers are used for the check

Parameters:

dataObject -

namespaceCode -

permissionName -

principalId -

additionalPermissionDetails -

additionalRoleQualifiers -

Returns:

boolean true if the user is authorized, false if not

isAuthorizedByTemplate

boolean isAuthorizedByTemplate(Object dataObject,
 String namespaceCode,
 String permissionTemplateName,
 String principalId,
 Map<String,String> additionalPermissionDetails,
 Map<String,String> additionalRoleQualifiers)

Determines whether the user identified by the given principal ID has been granted a permission of the given template in the context of the data object, the additional permission details and role qualifiers are used for the check

Parameters:

dataObject -

namespaceCode -

permissionTemplateName -

principalId -

additionalPermissionDetails -

additionalRoleQualifiers -

Returns:

boolean true if the user is authorized, false if not