org.apache.cxf.interceptor.security
Class SimpleAuthorizingInterceptor

java.lang.Object
  org.apache.cxf.phase.AbstractPhaseInterceptor<org.apache.cxf.message.Message>
      org.apache.cxf.interceptor.security.AbstractAuthorizingInInterceptor
          org.apache.cxf.interceptor.security.SimpleAuthorizingInterceptor

All Implemented Interfaces:

org.apache.cxf.interceptor.Interceptor<org.apache.cxf.message.Message>, org.apache.cxf.phase.PhaseInterceptor<org.apache.cxf.message.Message>

Direct Known Subclasses:

SecureAnnotationsInterceptor

public class SimpleAuthorizingInterceptor
extends AbstractAuthorizingInInterceptor

Constructor Summary

SimpleAuthorizingInterceptor()

Method Summary

protected List<String>	getExpectedRoles(Method method) Returns a list of expected roles for a given method.
protected boolean	isUserInRole(org.apache.cxf.security.SecurityContext sc, List<String> roles, boolean deny)
void	setGlobalRoles(String roles)
void	setMethodRolesMap(Map<String,String> rolesMap)
void	setUserRolesMap(Map<String,String> rolesMap)

Methods inherited from class org.apache.cxf.interceptor.security.AbstractAuthorizingInInterceptor

authorize, getDenyRoles, getTargetMethod, handleMessage

Methods inherited from class org.apache.cxf.phase.AbstractPhaseInterceptor

addAfter, addAfter, addBefore, addBefore, getAdditionalInterceptors, getAfter, getBefore, getId, getPhase, handleFault, isGET, isRequestor, setAfter, setBefore

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SimpleAuthorizingInterceptor

public SimpleAuthorizingInterceptor()

Method Detail

isUserInRole

protected boolean isUserInRole(org.apache.cxf.security.SecurityContext sc,
                               List<String> roles,
                               boolean deny)

Overrides:

isUserInRole in class AbstractAuthorizingInInterceptor

getExpectedRoles

protected List<String> getExpectedRoles(Method method)

Description copied from class: AbstractAuthorizingInInterceptor

Returns a list of expected roles for a given method.

Specified by:

getExpectedRoles in class AbstractAuthorizingInInterceptor

Parameters:

method - Method

Returns:

list, empty if no roles are available

setMethodRolesMap

public void setMethodRolesMap(Map<String,String> rolesMap)

setUserRolesMap

public void setUserRolesMap(Map<String,String> rolesMap)

setGlobalRoles

public void setGlobalRoles(String roles)