org.wicketstuff.security.components

Class SecureWebPage

java.lang.Object

org.apache.wicket.Component

org.apache.wicket.MarkupContainer

org.apache.wicket.Page

org.apache.wicket.markup.html.WebPage

org.wicketstuff.security.components.SecureWebPage

All Implemented Interfaces:

Serializable, Iterable<org.apache.wicket.Component>, org.apache.wicket.event.IEventSink, org.apache.wicket.event.IEventSource, org.apache.wicket.IConverterLocator, org.apache.wicket.IQueueRegion, org.apache.wicket.markup.html.IHeaderContributor, org.apache.wicket.page.IManageablePage, org.apache.wicket.request.component.IRequestableComponent, org.apache.wicket.request.component.IRequestablePage, org.apache.wicket.util.IHierarchical<org.apache.wicket.Component>, org.apache.wicket.util.io.IClusterable, ISecureComponent, ISecurePage

public class SecureWebPage
extends org.apache.wicket.markup.html.WebPage
implements ISecurePage

Basic implementation of a SecureWebPage. Note that any check added to this page using setSecurityCheck(ISecurityCheck) is too late to be considered for IAuthorizationStrategy.isInstantiationAuthorized(Class) so please check your wasp implementation for details on how to do that. Or see ClassAuthorizationStrategy for one way of doing it.

Author:

marrink

See Also:

Serialized Form

Field Summary

Fields inherited from class org.apache.wicket.Component

ENABLE, FLAG_AFTER_RENDERING, FLAG_INITIALIZED, FLAG_PREPARED_FOR_RENDER, FLAG_REMOVING_FROM_HIERARCHY, FLAG_RENDERING, FLAG_RESERVED1, FLAG_RESERVED2, FLAG_RESERVED3, FLAG_RESERVED4, FLAG_RESERVED5, FLAG_RESERVED8, PARENT_PATH, PATH_SEPARATOR, RENDER, RFLAG_CONTAINER_DEQUEING

Constructor Summary

Constructors

Constructor and Description
SecureWebPage()
SecureWebPage(org.apache.wicket.model.IModel<?> model)
SecureWebPage(org.apache.wicket.request.mapper.parameter.PageParameters parameters)

Method Summary

Methods

Modifier and Type	Method and Description
ISecurityCheck	getSecurityCheck() Gets the security check attached to this component.
boolean	isActionAuthorized(String action) Wrapper method for the isActionAuthorized method on component.
boolean	isActionAuthorized(WaspAction action) Wrapper method for the isActionAuthorized method on component.
boolean	isAuthenticated() authenticates the user for this component.
void	setSecurityCheck(ISecurityCheck check) Sets (or removes in the case of null) the security check on this component.

Methods inherited from class org.apache.wicket.markup.html.WebPage

configureResponse, getMarkupType, homePageLink, onAfterRender, onRender, renderXmlDecl, reportMissingHead, setHeaders, setNextAvailableId

Methods inherited from class org.apache.wicket.Page

componentChanged, componentRendered, detachModels, dirty, dirty, endComponentRender, getAutoIndex, getId, getPageClass, getPageId, getPageParameters, getPageReference, getRenderCount, getSizeInBytes, getStatelessHint, hierarchyAsString, internalOnModelChanged, internalPrepareForRender, isBookmarkable, isErrorPage, isPageStateless, onBeforeRender, onDetach, onInitialize, renderPage, setFreezePageId, setNumericId, setStatelessHint, setWasCreatedBookmarkable, startComponentRender, toString, wasCreatedBookmarkable, wasRendered

Methods inherited from class org.apache.wicket.MarkupContainer

add, addDequeuedComponent, addOrReplace, autoAdd, canDequeueTag, contains, dequeue, dequeue, dequeuePreamble, findComponentToDequeue, get, get, getAssociatedMarkup, getAssociatedMarkupStream, getMarkup, getRegionMarkup, internalAdd, internalInitialize, iterator, iterator, newDequeueContext, onAfterRenderChildren, onComponentTagBody, queue, remove, remove, removeAll, renderAll, renderAssociatedMarkup, renderNext, replace, setDefaultModel, size, swap, toString, visitChildren, visitChildren, visitChildren, visitChildren

Methods inherited from class org.apache.wicket.Component

add, addStateChange, afterRender, beforeRender, canCallListenerInterface, canCallListenerInterfaceAfterExpiry, checkComponentTag, checkComponentTagAttribute, checkHierarchyChange, clearOriginalDestination, configure, continueToOriginalDestination, debug, detach, detachModel, determineVisibility, error, exceptionMessage, fatal, findMarkupStream, findPage, findParent, findParentWithAssociatedMarkup, getAjaxRegionMarkupId, getApplication, getBehaviorById, getBehaviorId, getBehaviors, getBehaviors, getClassRelativePath, getConverter, getDefaultModel, getDefaultModelObject, getDefaultModelObjectAsString, getDefaultModelObjectAsString, getEscapeModelStrings, getFeedbackMessages, getFlag, getInnermostModel, getInnermostModel, getLocale, getLocalizer, getMarkup, getMarkupAttributes, getMarkupId, getMarkupId, getMarkupIdFromMarkup, getMarkupIdImpl, getMarkupSourcingStrategy, getMetaData, getModelComparator, getOutputMarkupId, getOutputMarkupPlaceholderTag, getPage, getPageRelativePath, getParent, getPath, getRenderBodyOnly, getRequest, getRequestCycle, getRequestFlag, getResponse, getSession, getString, getString, getString, getStyle, getVariation, hasBeenRendered, hasErrorMessage, hasFeedbackMessage, info, initModel, internalRenderComponent, internalRenderHead, isActionAuthorized, isAuto, isBehaviorAccepted, isEnableAllowed, isEnabled, isEnabledInHierarchy, isIgnoreAttributeModifier, isRenderAllowed, isStateless, isVersioned, isVisibilityAllowed, isVisible, isVisibleInHierarchy, markRendering, modelChanged, modelChanging, newMarkupSourcingStrategy, onComponentTag, onConfigure, onEvent, onModelChanged, onModelChanging, onReAdd, onRemove, prepareForRender, redirectToInterceptPage, remove, remove, render, renderComponentTag, rendered, renderHead, renderHead, renderPlaceholderTag, replaceComponentTagBody, replaceWith, sameInnermostModel, sameInnermostModel, send, setAuto, setDefaultModelObject, setEnabled, setEscapeModelStrings, setFlag, setIgnoreAttributeModifier, setMarkup, setMarkupId, setMarkupIdImpl, setMetaData, setOutputMarkupId, setOutputMarkupPlaceholderTag, setParent, setRenderBodyOnly, setRequestFlag, setResponsePage, setResponsePage, setResponsePage, setVersioned, setVisibilityAllowed, setVisible, success, urlFor, urlFor, urlFor, urlFor, urlFor, visitParents, visitParents, warn, wrap

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Methods inherited from interface org.apache.wicket.request.component.IRequestableComponent

canCallListenerInterfaceAfterExpiry, detach, get, getBehaviorById, getBehaviorId, getPage, getPageRelativePath

Methods inherited from interface org.apache.wicket.page.IManageablePage

detach

Methods inherited from interface org.apache.wicket.IQueueRegion

dequeue, getRegionMarkup, newDequeueContext

Constructor Detail

SecureWebPage

public SecureWebPage()

SecureWebPage

public SecureWebPage(org.apache.wicket.request.mapper.parameter.PageParameters parameters)

Parameters:

parameters -

SecureWebPage

public SecureWebPage(org.apache.wicket.model.IModel<?> model)

Parameters:

model -

Method Detail

setSecurityCheck

public final void setSecurityCheck(ISecurityCheck check)

Description copied from interface: ISecureComponent

Sets (or removes in the case of null) the security check on this component.

Specified by:

setSecurityCheck in interface ISecureComponent

See Also:

ISecureComponent.setSecurityCheck(org.wicketstuff.security.checks.ISecurityCheck)

getSecurityCheck

public final ISecurityCheck getSecurityCheck()

Description copied from interface: ISecureComponent

Gets the security check attached to this component.

Specified by:

getSecurityCheck in interface ISecureComponent

Returns:

the check or null if there is no check

See Also:

ISecureComponent.getSecurityCheck()

isActionAuthorized

public boolean isActionAuthorized(String action)

Description copied from interface: ISecureComponent

Wrapper method for the isActionAuthorized method on component. Subclasses can use the default implementation in SecureComponentHelper.

Specified by:

isActionAuthorized in interface ISecureComponent

Returns:

true if the action is allowed, false otherwise.

See Also:

ISecureComponent.isActionAuthorized(java.lang.String)

isActionAuthorized

public boolean isActionAuthorized(WaspAction action)

Description copied from interface: ISecureComponent

Wrapper method for the isActionAuthorized method on component. Subclasses can use the default implementation in SecureComponentHelper.

Specified by:

isActionAuthorized in interface ISecureComponent

Returns:

true if the action is allowed, false otherwise.

See Also:

ISecureComponent.isActionAuthorized(WaspAction)

isAuthenticated

public boolean isAuthenticated()

Description copied from interface: ISecureComponent

authenticates the user for this component. Note authentication should usually only be done by Pages.

Specified by:

isAuthenticated in interface ISecureComponent

Returns:

true if the user is authenticated, false otherwise

See Also:

ISecureComponent.isAuthenticated()