org.wicketstuff.security.checks

Class ClassSecurityCheck

java.lang.Object

org.wicketstuff.security.checks.AbstractSecurityCheck

org.wicketstuff.security.checks.ClassSecurityCheck

All Implemented Interfaces:

Serializable, ISecurityCheck

public class ClassSecurityCheck
extends AbstractSecurityCheck

Default instantiation check for any type of class. This is used by ClassAuthorizationStrategy to test for instantiation rights. But you can use it yourself to for any kind of action. Note that errorpages should not be outfitted with a securitycheck such as this that checks for instantiation.

Author:

marrink

See Also:

ClassAuthorizationStrategy, Serialized Form

Constructor Summary

Constructors

Constructor and Description
ClassSecurityCheck(Class<?> clazz) Constructs a new securitycheck for a class

Method Summary

Methods

Modifier and Type	Method and Description
Class<?>	getClazz() The class to check against.
boolean	isActionAuthorized(WaspAction action) Checks if the user is authorized for the action.
boolean	isAuthenticated() Redirects to the WaspAuthorizationStrategy.isClassAuthenticated(Class).

Methods inherited from class org.wicketstuff.security.checks.AbstractSecurityCheck

getActionFactory, getLoginPage, getStrategy, isActionAuthorized

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ClassSecurityCheck

public ClassSecurityCheck(Class<?> clazz)

Constructs a new securitycheck for a class

Parameters:

clazz - the class to use in the check

Throws:

IllegalArgumentException - if the clazz is null

Method Detail

getClazz

public Class<?> getClazz()

The class to check against.

Returns:

Returns the class.

isActionAuthorized

public boolean isActionAuthorized(WaspAction action)

Checks if the user is authorized for the action. special permission is given to the loginpage, which is always authorized. If the user is not authenticated he is redirected to the login page. Redirects the authorization check to the strategy if the user is authenticated.

Parameters:

action - the action(s) like render or enable.

Returns:

true if the user is authenticated and authorized, false otherwise.

Throws:

org.apache.wicket.RestartResponseAtInterceptPageException - if the user is not authenticated.

See Also:

ISecurityCheck.isActionAuthorized(org.wicketstuff.security.actions.WaspAction), WaspApplication.getLoginPage(), WaspAuthorizationStrategy.isClassAuthorized(Class, WaspAction)

isAuthenticated

public boolean isAuthenticated()

Redirects to the WaspAuthorizationStrategy.isClassAuthenticated(Class).

Returns:

true if an authenticated user is available, false otherwise.

See Also:

ISecurityCheck.isAuthenticated()