com.oracle.bpel.security
Class ACLManager

java.lang.Object
BaseACLManager
com.oracle.bpel.security.ACLManager

public abstract class ACLManager

extends BaseACLManager

Public abstract class that has to be implemented for having a valid ACLManager that is used by the BPEL server for authentication & authorization

Version:

1.0

Author:

Clemens Utschig-Utschig (Oracle Corporation)

See Also:

Serialized Form

Constructor Summary

ACLManager()
Public constructor that should use a cache for connections and care about other stuff.

Method Summary

abstract boolean	isAllowedToExecuteActivity(NormalizedMessage pMessage, java.lang.String pActivityName) Checks if a user is allowed to execute (=invoke) a certain activity of a process.
abstract boolean	isAllowedToExecuteProcess(NormalizedMessage pMessage) Checks if a user is allowed to execute (=invoke) a certain revision (if given) of a process.
abstract boolean	isAllowedToLookupActivity(NormalizedMessage pMessage, java.lang.String pActivityName) Checks if a user is allowed to lookup a certain activity of a process.
abstract boolean	isAllowedToLookupProcess(NormalizedMessage pMessage) Checks if a user is allowed to lookup a certain revision (if given) of a process.
abstract boolean	validateUser(NormalizedMessage pMessage) Checks if a user is valid in the context of a secured Process

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ACLManager

public ACLManager()
           throws ServerException

Public constructor that should use a cache for connections and care about other stuff.

Throws:

ServerException

Since:

1.0

Method Detail

validateUser

public abstract boolean validateUser(NormalizedMessage pMessage)
                              throws ServerException

Checks if a user is valid in the context of a secured Process

Parameters:

pMessage - the message will hold all information, including the domain information and headers

Returns:

valid or not

Throws:

ServerException - in case something breaks

isAllowedToExecuteProcess

public abstract boolean isAllowedToExecuteProcess(NormalizedMessage pMessage)
                                           throws ServerException

Checks if a user is allowed to execute (=invoke) a certain revision (if given) of a process.

Parameters:

pMessage - the message will hold all information, including the domain information and headers

Returns:

true if he is otherwise false

Throws:

ServerException - in case something breaks

isAllowedToExecuteActivity

public abstract boolean isAllowedToExecuteActivity(NormalizedMessage pMessage,
                                                   java.lang.String pActivityName)
                                            throws ServerException

Checks if a user is allowed to execute (=invoke) a certain activity of a process.

Parameters:

pActivityName - the name of the Activity

pMessage - the message will hold all information, including the domain information and headers

Returns:

true if he is otherwise false

Throws:

ServerException - in case something breaks

isAllowedToLookupProcess

public abstract boolean isAllowedToLookupProcess(NormalizedMessage pMessage)
                                          throws ServerException

Checks if a user is allowed to lookup a certain revision (if given) of a process.

Parameters:

pMessage - the message will hold all information, including the domain information and headers

Returns:

true if he is otherwise false

Throws:

ServerException - in case something breaks

isAllowedToLookupActivity

public abstract boolean isAllowedToLookupActivity(NormalizedMessage pMessage,
                                                  java.lang.String pActivityName)
                                           throws ServerException

Checks if a user is allowed to lookup a certain activity of a process.

Parameters:

pActivityName - the name of the Activity

Returns:

true if he is otherwise false

Throws:

ServerException - in case something breaks