org.broadleafcommerce.openadmin.server.security.remote

Class AdminSecurityServiceRemote

java.lang.Object

org.broadleafcommerce.openadmin.server.security.remote.AdminSecurityServiceRemote

All Implemented Interfaces:

AdminSecurityService, SecurityVerifier

@Service(value="blAdminSecurityRemoteService")
public class AdminSecurityServiceRemote
extends Object
implements AdminSecurityService, SecurityVerifier

Service for handeling security with Ajax components. Serves two functions.

• Converts the ServerSide AdminUser to a client level admin user with appropriate roles defined.
• Provides a method to check if the current logged in user matches the client side user and verifies whether that user has access to the entity operation they are trying to perform.

1.

Author:

jfischer

Field Summary

Fields

Modifier and Type	Field and Description
protected ExploitProtectionService	exploitProtectionService
protected RowLevelSecurityService	rowLevelSecurityService
protected AdminSecurityCheckExtensionManager	securityCheckExtensionManager
protected AdminSecurityService	securityService

Constructor Summary

Constructors

Constructor and Description
AdminSecurityServiceRemote()

Method Summary

Modifier and Type	Method and Description
AdminUser	getAdminUser()
AdminUser	getPersistentAdminUser()
void	securityCheck(PersistencePackage persistencePackage, EntityOperationType operationType)
protected void	securityCheck(String[] ceilingNames, EntityOperationType operationType)
void	securityCheck(String ceilingEntityFullyQualifiedName, EntityOperationType operationType)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

securityService

protected AdminSecurityService securityService

exploitProtectionService

protected ExploitProtectionService exploitProtectionService

rowLevelSecurityService

protected RowLevelSecurityService rowLevelSecurityService

securityCheckExtensionManager

protected AdminSecurityCheckExtensionManager securityCheckExtensionManager

Constructor Detail

AdminSecurityServiceRemote

public AdminSecurityServiceRemote()

Method Detail

getAdminUser

public AdminUser getAdminUser()
                       throws ServiceException

Specified by:

getAdminUser in interface AdminSecurityService

Throws:

ServiceException

getPersistentAdminUser

public AdminUser getPersistentAdminUser()

Specified by:

getPersistentAdminUser in interface SecurityVerifier

securityCheck

public void securityCheck(PersistencePackage persistencePackage,
                          EntityOperationType operationType)
                   throws ServiceException

Specified by:

securityCheck in interface SecurityVerifier

Throws:

ServiceException

securityCheck

public void securityCheck(String ceilingEntityFullyQualifiedName,
                          EntityOperationType operationType)
                   throws ServiceException

Specified by:

securityCheck in interface SecurityVerifier

Throws:

ServiceException

securityCheck

protected void securityCheck(String[] ceilingNames,
                             EntityOperationType operationType)
                      throws ServiceException

Throws:

ServiceException