Package org.nuxeo.ecm.core.security

Class LockSecurityPolicy

java.lang.Object

org.nuxeo.ecm.core.security.AbstractSecurityPolicy

org.nuxeo.ecm.core.security.LockSecurityPolicy

All Implemented Interfaces:

SecurityPolicy

Direct Known Subclasses:

WOPILockSecurityPolicy

public class LockSecurityPolicy
extends AbstractSecurityPolicy

Security policy that blocks WRITE permission on a document if it is locked by someone else.

Author:

Anahide Tchertchian, Florent Guillaume

Nested Class Summary

Nested classes/interfaces inherited from interface org.nuxeo.ecm.core.security.SecurityPolicy

SecurityPolicy.IdentityQueryTransformer, SecurityPolicy.QueryTransformer

Field Summary

Fields

Modifier and Type	Field	Description
protected static final ThreadLocal<Boolean>	IGNORE_POLICY

Constructor Summary

Constructors

Constructor	Description
LockSecurityPolicy()

Method Summary

Modifier and Type	Method	Description
Access	checkPermission(Document doc, ACP mergedAcp, NuxeoPrincipal principal, String permission, String[] resolvedPermissions, String[] additionalPrincipals)	Checks given permission for doc and principal.
SQLQuery.Transformer	getQueryTransformer(String repositoryName)	Get the transformer to use to apply this policy to a query.
boolean	isExpressibleInQuery(String repositoryName)	Checks if this policy can be expressed in a query for given repository.
static boolean	isIgnorePolicy()
boolean	isRestrictingPermission(String permission)	Checks if this policy is restricting the given permission.
static void	setIgnorePolicy(boolean ignore)

Methods inherited from class org.nuxeo.ecm.core.security.AbstractSecurityPolicy

getQueryTransformer, isExpressibleInQuery

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

IGNORE_POLICY

protected static final ThreadLocal<Boolean> IGNORE_POLICY

Constructor Details

LockSecurityPolicy

public LockSecurityPolicy()

Method Details

checkPermission

public Access checkPermission(Document doc,
 ACP mergedAcp,
 NuxeoPrincipal principal,
 String permission,
 String[] resolvedPermissions,
 String[] additionalPrincipals)

Description copied from interface: SecurityPolicy

Checks given permission for doc and principal.

Note that for the Browse permission, which is also implemented in SQL using SecurityPolicy.getQueryTransformer(java.lang.String), a security policy must never bypass standard ACL access, it must only return DENY or UNKNOWN. Failing to do this would make direct access and queries behave differently.

Parameters:

doc - the document to check

mergedAcp - merged ACP resolved for this document

principal - principal to check

permission - permission to check

resolvedPermissions - permissions or groups of permissions containing permission

Returns:

access: GRANT, DENY, or UNKNOWN. When UNKNOWN is returned, following policies or default core security are applied.

isRestrictingPermission

public boolean isRestrictingPermission(String permission)

Description copied from interface: SecurityPolicy

Checks if this policy is restricting the given permission.

Queries check the BROWSE permission.

Specified by:

isRestrictingPermission in interface SecurityPolicy

Overrides:

isRestrictingPermission in class AbstractSecurityPolicy

Parameters:

permission - the permission to check for

Returns:

true if the policy restricts the permission

isExpressibleInQuery

public boolean isExpressibleInQuery(String repositoryName)

Description copied from interface: SecurityPolicy

Checks if this policy can be expressed in a query for given repository.

If not, then any query made will have to be post-filtered.

Specified by:

isExpressibleInQuery in interface SecurityPolicy

Overrides:

isExpressibleInQuery in class AbstractSecurityPolicy

Parameters:

repositoryName - the target repository name.

Returns:

true if the policy can be expressed in a query

getQueryTransformer

public SQLQuery.Transformer getQueryTransformer(String repositoryName)

Description copied from interface: SecurityPolicy

Get the transformer to use to apply this policy to a query.

Called only when SecurityPolicy.isExpressibleInQuery(String) returned true

Specified by:

getQueryTransformer in interface SecurityPolicy

Overrides:

getQueryTransformer in class AbstractSecurityPolicy

Parameters:

repositoryName - the target repository name.

Returns:

the transformer

setIgnorePolicy

public static void setIgnorePolicy(boolean ignore)

Since:

11.1

isIgnorePolicy

public static boolean isIgnorePolicy()

Since:

11.1