edu.internet2.middleware.grouper.permissions
Class PermissionRoleDelegate

java.lang.Object
  edu.internet2.middleware.grouper.permissions.PermissionRoleDelegate

All Implemented Interfaces:

Serializable

public class PermissionRoleDelegate
extends Object
implements Serializable

delegate the role

See Also:

Serialized Form

PermissionRoleDelegate

public PermissionRoleDelegate(Group group1)

Parameters:

group1 -

assignRolePermission

@Deprecated
public AttributeAssignResult assignRolePermission(AttributeDefName attributeDefName)

Deprecated. use assignRolePermission(attributeDefName, permissionAllowed) instead, will be removed some time after 2.0

add a permission to a role, which means that any subject in the role will get this permission, and any role in the roleSet directed graph will also get the permission

Parameters:

attributeDefName -

Returns:

if new, and the assignment

assignRolePermission

public AttributeAssignResult assignRolePermission(AttributeDefName attributeDefName,
                                                  PermissionAllowed permissionAllowed)

add a permission to a role, which means that any subject in the role will get this permission, and any role in the roleSet directed graph will also get the permission

Parameters:

attributeDefName -

permissionAllowed -

Returns:

if new, and the assignment

removeRolePermission

public AttributeAssignResult removeRolePermission(AttributeDefName attributeDefName)

remove a permission from a role, which means that any subject in the role will not directly have this permission, and any role in the roleSet directed graph will also not get this permission from this role

Parameters:

attributeDefName -

Returns:

result

retrieveAssignment

public AttributeAssign retrieveAssignment(Member member,
                                          String action,
                                          AttributeDefName attributeDefName,
                                          boolean checkSecurity,
                                          boolean exceptionfNotFound)

Parameters:

member -

action -

attributeDefName -

checkSecurity -

exceptionfNotFound -

Returns:

the assignment

assignSubjectRolePermission

@Deprecated
public AttributeAssignResult assignSubjectRolePermission(AttributeDefName attributeDefName,
                                                                    edu.internet2.middleware.subject.Subject subject)

Deprecated. use assignSubjectRolePermission(attributeDefName, subject, permissionAllowed) will be removed some time after 2.0

add a permission to a role / subject pair (effective membership)

Parameters:

attributeDefName -

subject -

Returns:

if new, and the assignment

assignSubjectRolePermission

public AttributeAssignResult assignSubjectRolePermission(AttributeDefName attributeDefName,
                                                         edu.internet2.middleware.subject.Subject subject,
                                                         PermissionAllowed permissionAllowed)

add a permission to a role / subject pair (effective membership)

Parameters:

attributeDefName -

subject -

permissionAllowed -

Returns:

if new, and the assignment

removeSubjectRolePermission

public AttributeAssignResult removeSubjectRolePermission(AttributeDefName attributeDefName,
                                                         edu.internet2.middleware.subject.Subject subject)

add a permission to a role / subject pair (effective membership)

Parameters:

attributeDefName -

subject -

Returns:

result

assignRolePermission

@Deprecated
public AttributeAssignResult assignRolePermission(String action,
                                                             AttributeDefName attributeDefName)

Deprecated. use assignRolePermission(action, attributeDefName, permissionAllowed), will remove this some time after 2.0

add a permission to a role, which means that any subject in the role will get this permission, and any role in the roleSet directed graph will also get the permission

Parameters:

action - is the action on the assignment (e.g. read, write, assign (default))

attributeDefName -

Returns:

if new, and the assignment

assignRolePermission

public AttributeAssignResult assignRolePermission(String action,
                                                  AttributeDefName attributeDefName,
                                                  PermissionAllowed permissionAllowed)

add a permission to a role, which means that any subject in the role will get this permission, and any role in the roleSet directed graph will also get the permission

Parameters:

action - is the action on the assignment (e.g. read, write, assign (default))

attributeDefName -

permissionAllowed - allowed or disallowed

Returns:

if new, and the assignment

assignSubjectRolePermission

@Deprecated
public AttributeAssignResult assignSubjectRolePermission(String action,
                                                                    AttributeDefName attributeDefName,
                                                                    edu.internet2.middleware.subject.Subject subject)

Deprecated. use assignSubjectRolePermission(action, attributeDefName, subject, permissionAllowed) instead

add a permission to a role / subject pair (effective membership)

Parameters:

action - is the action on the assignment (e.g. read, write, assign (default))

attributeDefName -

subject -

Returns:

if new, and the assignment

assignSubjectRolePermission

public AttributeAssignResult assignSubjectRolePermission(String action,
                                                         AttributeDefName attributeDefName,
                                                         edu.internet2.middleware.subject.Subject subject,
                                                         PermissionAllowed permissionAllowed)

add a permission to a role / subject pair (effective membership)

Parameters:

action - is the action on the assignment (e.g. read, write, assign (default))

attributeDefName -

subject -

permissionAllowed -

Returns:

if new, and the assignment

removeRolePermission

public AttributeAssignResult removeRolePermission(String action,
                                                  AttributeDefName attributeDefName)

remove a permission from a role, which means that any subject in the role will not directly have this permission, and any role in the roleSet directed graph will also not get this permission from this role

Parameters:

action - is the action on the assignment (e.g. read, write, assign (default))

attributeDefName -

Returns:

result

removeSubjectRolePermission

public AttributeAssignResult removeSubjectRolePermission(String action,
                                                         AttributeDefName attributeDefName,
                                                         edu.internet2.middleware.subject.Subject subject)

add a permission to a role / subject pair (effective membership)

Parameters:

action - is the action on the assignment (e.g. read, write, assign (default))

attributeDefName -

subject -

Returns:

result

assignSubjectRolePermission

@Deprecated
public AttributeAssignResult assignSubjectRolePermission(AttributeDefName attributeDefName,
                                                                    Member member)

Deprecated. use assignSubjectRolePermission(attributeDefName, member, permissionAllowed) will be removed some time after 2.0

add a permission to a role / subject pair (effective membership)

Parameters:

attributeDefName -

member -

Returns:

if new, and the assignment

assignSubjectRolePermission

public AttributeAssignResult assignSubjectRolePermission(AttributeDefName attributeDefName,
                                                         Member member,
                                                         PermissionAllowed permissionAllowed)

add a permission to a role / subject pair (effective membership)

Parameters:

attributeDefName -

member -

permissionAllowed -

Returns:

if new, and the assignment

assignSubjectRolePermission

@Deprecated
public AttributeAssignResult assignSubjectRolePermission(String action,
                                                                    AttributeDefName attributeDefName,
                                                                    Member member)

Deprecated. use assignSubjectRolePermission(action, attributeDefName, member, permissionAllowed) will be removed some time after 2.0

add a permission to a role / subject pair (effective membership)

Parameters:

action - is the action on the assignment (e.g. read, write, assign (default))

attributeDefName -

member -

Returns:

if new, and the assignment

assignSubjectRolePermission

public AttributeAssignResult assignSubjectRolePermission(String action,
                                                         AttributeDefName attributeDefName,
                                                         Member member,
                                                         PermissionAllowed permissionAllowed)

add a permission to a role / subject pair (effective membership)

Parameters:

action - is the action on the assignment (e.g. read, write, assign (default))

attributeDefName -

member -

permissionAllowed -

Returns:

if new, and the assignment

removeSubjectRolePermission

public AttributeAssignResult removeSubjectRolePermission(AttributeDefName attributeDefName,
                                                         Member member)

add a permission to a role / subject pair (effective membership)

Parameters:

attributeDefName -

member -

Returns:

result

removeSubjectRolePermission

public AttributeAssignResult removeSubjectRolePermission(String action,
                                                         AttributeDefName attributeDefName,
                                                         Member member)

add a permission to a role / subject pair (effective membership)

Parameters:

action - is the action on the assignment (e.g. read, write, assign (default))

attributeDefName -

member -

Returns:

attribute assign result

delegateRolePermission

public AttributeAssignResult delegateRolePermission(AttributeDefName attributeDefName,
                                                    boolean assign,
                                                    AttributeAssignDelegateOptions attributeAssignDelegateOptions)

add a permission to a role, which means that any subject in the role will get this permission, and any role in the roleSet directed graph will also get the permission. Note: the subject assigning must have delegate or grant on permission

Parameters:

attributeDefName -

assign - true to assign, false to remove

attributeAssignDelegateOptions - options in the assignment, null if none

Returns:

if new, and the assignment

delegateRolePermission

public AttributeAssignResult delegateRolePermission(String action,
                                                    AttributeDefName attributeDefName,
                                                    boolean assign,
                                                    AttributeAssignDelegateOptions attributeAssignDelegateOptions)

add a permission to a role, which means that any subject in the role will get this permission, and any role in the roleSet directed graph will also get the permission Note: the subject assigning must have delegate or grant on permission

Parameters:

action - is the action on the assignment (e.g. read, write, assign (default))

attributeDefName -

assign - true to assign, false to remove

attributeAssignDelegateOptions - options in the assignment, null if none

Returns:

if new, and the assignment

delegateSubjectRolePermission

public AttributeAssignResult delegateSubjectRolePermission(AttributeDefName attributeDefName,
                                                           Member member,
                                                           boolean assign,
                                                           AttributeAssignDelegateOptions attributeAssignDelegateOptions)

add a permission to a role / subject pair (effective membership) Note: the subject assigning must have delegate or grant on permission

Parameters:

attributeDefName -

member -

assign - true to assign, false to remove

attributeAssignDelegateOptions - options in the assignment, null if none

Returns:

if new, and the assignment

delegateSubjectRolePermission

public AttributeAssignResult delegateSubjectRolePermission(AttributeDefName attributeDefName,
                                                           edu.internet2.middleware.subject.Subject subject,
                                                           boolean assign,
                                                           AttributeAssignDelegateOptions attributeAssignDelegateOptions)

add a permission to a role / subject pair (effective membership)

Parameters:

attributeDefName -

subject -

assign - true to assign, false to remove

attributeAssignDelegateOptions - options in the assignment, null if none

Returns:

if new, and the assignment

delegateSubjectRolePermission

public AttributeAssignResult delegateSubjectRolePermission(String action,
                                                           AttributeDefName attributeDefName,
                                                           Member member,
                                                           boolean assign,
                                                           AttributeAssignDelegateOptions attributeAssignDelegateOptions)

add a permission to a role / subject pair (effective membership)

Parameters:

action - is the action on the assignment (e.g. read, write, assign (default))

attributeDefName -

member -

assign - true to assign, false to remove

attributeAssignDelegateOptions - options in the assignment, null if none

Returns:

if new, and the assignment

delegateSubjectRolePermission

public AttributeAssignResult delegateSubjectRolePermission(String action,
                                                           AttributeDefName attributeDefName,
                                                           edu.internet2.middleware.subject.Subject subject,
                                                           boolean assign,
                                                           AttributeAssignDelegateOptions attributeAssignDelegateOptions)

add a permission to a role / subject pair (effective membership)

Parameters:

action - is the action on the assignment (e.g. read, write, assign (default))

attributeDefName -

subject -

assign - true to assign, false to remove

attributeAssignDelegateOptions - options in the assignment, null if none

Returns:

if new, and the assignment