org.wicketstuff.security.swarm.checks

Class DataSecurityCheck

java.lang.Object

org.wicketstuff.security.checks.AbstractSecurityCheck

org.wicketstuff.security.swarm.checks.DataSecurityCheck

All Implemented Interfaces:

Serializable, ISecurityCheck

public class DataSecurityCheck
extends AbstractSecurityCheck

SecurityCheck that uses a DataPermission. For example
new DataSecurityCheck("something");
requires the following permission in your policy file:
permission ${DataPermission} "something", "render";
if you want the component(s) having that securitycheck to be visible.

Author:

marrink

See Also:

Serialized Form

Constructor Summary

Constructors

Constructor and Description
DataSecurityCheck(String securityId) Creates a check that will verify if the current user has a DataPermission with the specified name.

Method Summary

Methods

Modifier and Type	Method and Description
String	getSecurityId() The id / name from the DataPermission.
boolean	isActionAuthorized(WaspAction action) Checks if there are sufficient rights to perform the desired action(s).
boolean	isAuthenticated() Checks if there is an authenticated user available.

Methods inherited from class org.wicketstuff.security.checks.AbstractSecurityCheck

getActionFactory, getLoginPage, getStrategy, isActionAuthorized

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

DataSecurityCheck

public DataSecurityCheck(String securityId)

Creates a check that will verify if the current user has a DataPermission with the specified name.

Parameters:

securityId - the name of the DataPermission in your policy file

Method Detail

isActionAuthorized

public boolean isActionAuthorized(WaspAction action)

Description copied from interface: ISecurityCheck

Checks if there are sufficient rights to perform the desired action(s). Note that we don't ask what needs to have these rights, the implementation will decide if it checks the class, component, model or whatever they like.

Parameters:

action - the action(s) like render or enable.

Returns:

true if there are sufficient rights, false otherwise.

See Also:

ISecurityCheck.isActionAuthorized(org.wicketstuff.security.actions.WaspAction)

isAuthenticated

public boolean isAuthenticated()

Description copied from interface: ISecurityCheck

Checks if there is an authenticated user available. If not a page might decide to redirect to a login page instead. other components won't use this ordinarily.

Returns:

true if an authenticated user is available, false otherwise.

See Also:

ISecurityCheck.isAuthenticated()

getSecurityId

public final String getSecurityId()

The id / name from the DataPermission.

Returns:

securityId