org.apache.directory.server.core.authz.support

Class RelatedUserClassFilter

java.lang.Object

org.apache.directory.server.core.authz.support.RelatedUserClassFilter

All Implemented Interfaces:

ACITupleFilter

public class RelatedUserClassFilter
extends java.lang.Object
implements ACITupleFilter

An ACITupleFilter that discards all tuples whose UserClasses are not related with the current user. (18.8.3.1, X.501)

Field Summary

Fields

Modifier and Type	Field and Description
private SubtreeEvaluator	subtreeEvaluator

Fields inherited from interface org.apache.directory.server.core.authz.support.ACITupleFilter

ACI_LOG

Constructor Summary

Constructors

Constructor and Description
RelatedUserClassFilter(SubtreeEvaluator subtreeEvaluator)

Method Summary

Modifier and Type	Method and Description
java.util.Collection<org.apache.directory.api.ldap.aci.ACITuple>	filter(AciContext aciContext, OperationScope scope, org.apache.directory.api.ldap.model.entry.Entry userEntry) Returns the collection of the filtered tuples using the specified extra information.
private boolean	isRelated(java.util.Collection<org.apache.directory.api.ldap.model.name.Dn> userGroupNames, org.apache.directory.api.ldap.model.name.Dn userName, org.apache.directory.api.ldap.model.entry.Entry userEntry, org.apache.directory.api.ldap.model.name.Dn entryName, java.util.Collection<org.apache.directory.api.ldap.aci.UserClass> userClasses)
private boolean	matchUserClassSubtree(org.apache.directory.api.ldap.model.name.Dn userName, org.apache.directory.api.ldap.model.entry.Entry userEntry, org.apache.directory.api.ldap.aci.UserClass.Subtree subtree)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

subtreeEvaluator

private final SubtreeEvaluator subtreeEvaluator

Constructor Detail

RelatedUserClassFilter

public RelatedUserClassFilter(SubtreeEvaluator subtreeEvaluator)

Method Detail

filter

public java.util.Collection<org.apache.directory.api.ldap.aci.ACITuple> filter(AciContext aciContext,
                                                                               OperationScope scope,
                                                                               org.apache.directory.api.ldap.model.entry.Entry userEntry)
                                                                        throws org.apache.directory.api.ldap.model.exception.LdapException

Description copied from interface: ACITupleFilter

Returns the collection of the filtered tuples using the specified extra information.

Specified by:

filter in interface ACITupleFilter

Parameters:

aciContext - the container for ACI items

scope - the scope of the operation to be performed

userEntry - the Entry of the current user entry in the DIT

Returns:

the collection of filtered tuples

Throws:

org.apache.directory.api.ldap.model.exception.LdapException - if failed to filter the specific tuples

isRelated

private boolean isRelated(java.util.Collection<org.apache.directory.api.ldap.model.name.Dn> userGroupNames,
                          org.apache.directory.api.ldap.model.name.Dn userName,
                          org.apache.directory.api.ldap.model.entry.Entry userEntry,
                          org.apache.directory.api.ldap.model.name.Dn entryName,
                          java.util.Collection<org.apache.directory.api.ldap.aci.UserClass> userClasses)
                   throws org.apache.directory.api.ldap.model.exception.LdapException

Throws:

org.apache.directory.api.ldap.model.exception.LdapException

matchUserClassSubtree

private boolean matchUserClassSubtree(org.apache.directory.api.ldap.model.name.Dn userName,
                                      org.apache.directory.api.ldap.model.entry.Entry userEntry,
                                      org.apache.directory.api.ldap.aci.UserClass.Subtree subtree)
                               throws org.apache.directory.api.ldap.model.exception.LdapException

Throws:

org.apache.directory.api.ldap.model.exception.LdapException