electric.soap.security.guards
Class RoleGuard

java.lang.Object
  electric.soap.security.guards.RoleGuard

All Implemented Interfaces:

IEXMLLoggingConstants, IGLUELoggingConstants, ILoggingConstants, IWSSGuard

public class RoleGuard

extends java.lang.Object

implements IWSSGuard, IGLUELoggingConstants

RoleGuard tests the incoming soap message to make sure that at least one of the authenticated principals is a member of a given role.

Author:

webMethods

Field Summary

protected boolean	allMustAuthorize
protected IRealm	realm
protected java.lang.String[]	roles

Fields inherited from interface electric.glue.IGLUELoggingConstants

CLUSTER_DEBUG_EVENT, CLUSTER_EVENT, CONSOLE_DEBUG_EVENT, DEPLOY_EVENT, DETECTORS_EVENT, HTTP_EVENT, JMS_EVENT, REBINDING_EVENT, SECURITY_DEBUG_EVENT, SECURITY_DETAIL_EVENT, SERVLET_EVENT, SOAP_EVENT

Fields inherited from interface electric.xml.IEXMLLoggingConstants

MAPPING_EVENT, SCHEMA_EVENT

Fields inherited from interface electric.util.log.ILoggingConstants

CLASSLOADER_EVENT, COMMAND_EVENT, COMMENT_EVENT, CONFIG_EVENT, DEBUG_EVENT, ELECTRIC_LOGGING_PROPERTY, ERROR_EVENT, EXCEPTION_EVENT, FILE_EVENT, LICENSE_EVENT, RESOURCES_EVENT, SECURITY_EVENT, SHUTDOWN_EVENT, SOURCE_EVENT, SQL_EVENT, STARTUP_EVENT, WARNING_EVENT

Constructor Summary

RoleGuard(IRealm realm, java.lang.String role)

RoleGuard(IRealm realm, java.lang.String[] roles)

RoleGuard(IRealm realm, java.lang.String[] roles, boolean allMustAuthorize)

Method Summary

boolean

authorize(SOAPMessage message, java.util.Vector signatures, java.util.Vector encryptions, java.util.Vector principalList, java.util.Vector authorizationCredentials) Test if there is at least one authorized principal in the given role in a particular realm.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

realm

protected IRealm realm

roles

protected java.lang.String[] roles

allMustAuthorize

protected boolean allMustAuthorize

Constructor Detail

RoleGuard

public RoleGuard(IRealm realm,
                 java.lang.String role)

Parameters:

realm -

RoleGuard

public RoleGuard(IRealm realm,
                 java.lang.String[] roles)

Parameters:

realm -

roles -

RoleGuard

public RoleGuard(IRealm realm,
                 java.lang.String[] roles,
                 boolean allMustAuthorize)

Parameters:

realm -

roles -

allMustAuthorize -

Method Detail

authorize

public boolean authorize(SOAPMessage message,
                         java.util.Vector signatures,
                         java.util.Vector encryptions,
                         java.util.Vector principalList,
                         java.util.Vector authorizationCredentials)

Test if there is at least one authorized principal in the given role in a particular realm. The list may contain other principals that are not authorized, only one of them is required to be in role.

Specified by:

authorize in interface IWSSGuard

Parameters:

message -

signatures -

principalList -

authorizationCredentials -

Returns:

true if this guard authorizes the message.