Package org.openiam.authmanager.service

Interface AuthorizationManagerService

All Superinterfaces:

Sweepable

All Known Implementing Classes:

AuthorizationManagerServiceImpl

public interface AuthorizationManagerService
extends Sweepable

Method Summary

Modifier and Type	Method	Description
void	fixDataInconsistencies()	Should only be called on tests, never at run-time!
Map<String,Boolean>	getEntitlementMap(String userId, Set<String> resourceIds)
Set<GroupAuthorizationRight>	getGroupsForUser(String userId)
ResourceEntitlementToken	getNonCachedEntitlementsForGroup(NonCachedEntitlementRequest request)
ResourceEntitlementToken	getNonCachedEntitlementsForOrganization(NonCachedEntitlementRequest request)
ResourceEntitlementToken	getNonCachedEntitlementsForResource(NonCachedEntitlementRequest request)
ResourceEntitlementToken	getNonCachedEntitlementsForRole(NonCachedEntitlementRequest request)
ResourceEntitlementToken	getNonCachedEntitlementsForUser(NonCachedEntitlementRequest request)
Set<OrganizationAuthorizationRight>	getOrganizationsForUser(String userId)
Set<String>	getOwnerIdsForGroup(String groupId)
HashMap<String,SetStringResponse>	getOwnerIdsForGroupSet(Set<String> groupIdSet)
HashMap<String,SetStringResponse>	getOwnerIdsForResourceSet(Set<String> resourceIdSet)
Set<ResourceAuthorizationRight>	getResourcesForUser(String userId)
Set<RoleAuthorizationRight>	getRolesForUser(String userId)
void	invalidateUserEntitlementsFromCache(String id)
boolean	isEntitled(String userId, String resourceId)
boolean	isEntitled(String userId, String resourceId, String rightId)
boolean	isMemberOfGroup(String userId, String groupId)
boolean	isMemberOfGroup(String userId, String groupId, String rightId)
boolean	isMemberOfOrganization(String userId, String organizationId)
boolean	isMemberOfOrganization(String userId, String organizationId, String rightId)
boolean	isMemberOfRole(String userId, String roleId)
boolean	isMemberOfRole(String userId, String roleId, String rightId)
void	markUserAsEntitlementsLoadingInProgress(String userId, boolean inProgress)
void	rebuildGraph()	For test or emergency use only.
void	removeExpiredEdges()	Should only be called on tests, never at run-time!
boolean	showOnlyVisibleObjects(String userId)

Methods inherited from interface org.openiam.thread.Sweepable

sweep

Method Detail

isEntitled

boolean isEntitled(String userId,
                   String resourceId)

getEntitlementMap

Map<String,Boolean> getEntitlementMap(String userId,
                                            Set<String> resourceIds)

isEntitled

boolean isEntitled(String userId,
                   String resourceId,
                   String rightId)

isMemberOfGroup

boolean isMemberOfGroup(String userId,
                        String groupId)

isMemberOfGroup

boolean isMemberOfGroup(String userId,
                        String groupId,
                        String rightId)

isMemberOfRole

boolean isMemberOfRole(String userId,
                       String roleId)

isMemberOfRole

boolean isMemberOfRole(String userId,
                       String roleId,
                       String rightId)

isMemberOfOrganization

boolean isMemberOfOrganization(String userId,
                               String organizationId)

isMemberOfOrganization

boolean isMemberOfOrganization(String userId,
                               String organizationId,
                               String rightId)

getResourcesForUser

Set<ResourceAuthorizationRight> getResourcesForUser(String userId)

getGroupsForUser

Set<GroupAuthorizationRight> getGroupsForUser(String userId)

getRolesForUser

Set<RoleAuthorizationRight> getRolesForUser(String userId)

getOrganizationsForUser

Set<OrganizationAuthorizationRight> getOrganizationsForUser(String userId)

showOnlyVisibleObjects

boolean showOnlyVisibleObjects(String userId)

invalidateUserEntitlementsFromCache

void invalidateUserEntitlementsFromCache(String id)

rebuildGraph

void rebuildGraph()

For test or emergency use only. If your data set is large, this function will likely time-out if calling via HTTP and/or RabbitMQ This function will delete the entire graph, and rebuild it from scratch

getNonCachedEntitlementsForUser

ResourceEntitlementToken getNonCachedEntitlementsForUser(NonCachedEntitlementRequest request)
                                                  throws NoGraphIdFoundException

Throws:

NoGraphIdFoundException

getNonCachedEntitlementsForGroup

ResourceEntitlementToken getNonCachedEntitlementsForGroup(NonCachedEntitlementRequest request)
                                                   throws NoGraphIdFoundException

Throws:

NoGraphIdFoundException

getNonCachedEntitlementsForRole

ResourceEntitlementToken getNonCachedEntitlementsForRole(NonCachedEntitlementRequest request)
                                                  throws NoGraphIdFoundException

Throws:

NoGraphIdFoundException

getNonCachedEntitlementsForOrganization

ResourceEntitlementToken getNonCachedEntitlementsForOrganization(NonCachedEntitlementRequest request)
                                                          throws NoGraphIdFoundException

Throws:

NoGraphIdFoundException

getNonCachedEntitlementsForResource

ResourceEntitlementToken getNonCachedEntitlementsForResource(NonCachedEntitlementRequest request)
                                                      throws NoGraphIdFoundException

Throws:

NoGraphIdFoundException

getOwnerIdsForResourceSet

HashMap<String,SetStringResponse> getOwnerIdsForResourceSet(Set<String> resourceIdSet)
                                                           throws NoGraphIdFoundException

Throws:

NoGraphIdFoundException

getOwnerIdsForGroup

Set<String> getOwnerIdsForGroup(String groupId)
                         throws NoGraphIdFoundException

Throws:

NoGraphIdFoundException

getOwnerIdsForGroupSet

HashMap<String,SetStringResponse> getOwnerIdsForGroupSet(Set<String> groupIdSet)
                                                        throws NoGraphIdFoundException

Throws:

NoGraphIdFoundException

removeExpiredEdges

void removeExpiredEdges()

Should only be called on tests, never at run-time! This is a scheduled method which removes expired edges. It:

fixDataInconsistencies

void fixDataInconsistencies()

Should only be called on tests, never at run-time! This is a scheduled method which synchs the graph databases. It: 1) Addeds Verticies where VERTEX_ID is NULL 2) Adds Edges where EDGE_ID is null. Usually, these are edges with start/end date

markUserAsEntitlementsLoadingInProgress

void markUserAsEntitlementsLoadingInProgress(String userId,
                                             boolean inProgress)

Parameters:

userId - - the user ID

inProgress - - if the user's entitlements are being loaded If the user's entitlements are currently being loaded, or if they are finished loading, this method will mark this as such

inProgress -