com.whitestein.lsps.common

Interface SecurityManagerService

All Known Subinterfaces:

SecurityManagerServiceLocal, SecurityManagerServiceRemote

All Known Implementing Classes:

SecurityManagerServiceBean

public interface SecurityManagerService

Service that provides the security identity and security rights.

Author:

rba

Method Summary

Modifier and Type	Method and Description
String	getOriginalPrincipalName() Returns the original principal of the current request.
String	getPrincipalName() Returns the current principal name.
Set<String>	getPrincipalRights() Returns the set of rights of the current principal.
boolean	hasPrincipalAnyRight(List<String> rights) Answer whether the current principal is active and has any of the given rights
boolean	hasPrincipalRight(String right) Returns true if the current principal has the given right.
boolean	isPrincipalEnabled() Returns true if the current principal is enabled.

Method Detail

getPrincipalName

String getPrincipalName()

Returns the current principal name.

Returns:

the current principal name

getOriginalPrincipalName

String getOriginalPrincipalName()

Returns the original principal of the current request. The principal can be altered during the current request using RunAs.

Returns:

the original principal of the current request

isPrincipalEnabled

boolean isPrincipalEnabled()

Returns true if the current principal is enabled.

Returns:

true if the current principal is enabled

getPrincipalRights

Set<String> getPrincipalRights()

Returns the set of rights of the current principal.

Returns:

the set of rights of the current principal

hasPrincipalRight

boolean hasPrincipalRight(String right)

Returns true if the current principal has the given right.

Parameters:

right -

Returns:

true if the current principal has the given right

hasPrincipalAnyRight

boolean hasPrincipalAnyRight(List<String> rights)

Answer whether the current principal is active and has any of the given rights

Parameters:

rights - the rights person is required to have (at least one of them) or null if none is required

Returns:

true when person with given login is active and has any of the requested rights