org.osgl.aaa

Interface DynamicPermissionCheckHelper<T>

public interface DynamicPermissionCheckHelper<T>

Dynamic permission check helper could be implemented by application to provide a fain grained authorization on instance level

Author:

greenlaw110@gmail.com

Method Summary

Modifier and Type	Method and Description
boolean	isAssociated(T target, Principal user) Check if a target resource is associated with a principal.
List<? extends Permission>	permissions() Returns a list of permissions that this dynamic permission check helper could be used to check against the dynamic association.

Method Detail

permissions

List<? extends Permission> permissions()

Returns a list of permissions that this dynamic permission check helper could be used to check against the dynamic association.

If the helper returns an empty list then it means it could be used on any permission

Returns:

a list of permission this dynamic permission check helper effect on

isAssociated

boolean isAssociated(T target,
                     Principal user)

Check if a target resource is associated with a principal.

Parameters:

target - the target resource been guarded

user - the principal who want to access the resource

Returns:

true if the resource is associated with the user