com.sap.netweaver.bc.rf.mi.security
Interface IMutableSecurityManager

[contained in: com.sap.netweaver.bc.rf.par - bc.rf.mi_api.jar]

All Superinterfaces:

ISecurityManager

public interface IMutableSecurityManager

extends ISecurityManager

Read-And-Write interface describing a repository sub manager for security. This interface allows for simple setting and removing of permissions on resources, but doesn't offer any sophisticated operations, denies or orderings, because security APIs are usually very much specialized and can't be defined in an general interface for a repository sub manager. Specifically denies would be way to sophisticated including all the problems of read access and ordering. A more complex abstraction of security settings including denies and other features would impose too much of a requirement for repositories. Not all repositories might be able to support such a complex API even in parts.

Method Summary

void	grant(IResourceHandle resourceHandle, com.sap.netweaver.bc.rf.mi.security.IPrincipal principal, IPermission permission) Set permission for the given principal on the given resource handle.
void	grant(IResourceHandle resourceHandle, com.sap.netweaver.bc.rf.mi.security.IPrincipal principal, java.util.List permissions) Set list of permissions for the given principal on the given resource handle.
void	grant(java.util.List ridList, com.sap.netweaver.bc.rf.mi.security.IPrincipal principal, IPermission permission) Set permission for the given principal on the given resource identifiers.
void	grant(java.util.List ridList, com.sap.netweaver.bc.rf.mi.security.IPrincipal principal, java.util.List permissions) Set list of permissions for the given principal on the given resource identifiers.
void	revoke(IResourceHandle resourceHandle, com.sap.netweaver.bc.rf.mi.security.IPrincipal principal, IPermission permission) Remove permission for the given principal on the given resource handle.
void	revoke(IResourceHandle resourceHandle, com.sap.netweaver.bc.rf.mi.security.IPrincipal principal, java.util.List permissions) Remove list of permissions for the given principal on the given resource handle.
void	revoke(java.util.List ridList, com.sap.netweaver.bc.rf.mi.security.IPrincipal principal, IPermission permission) Remove permission for the given principal on the given resource identifiers.
void	revoke(java.util.List ridList, com.sap.netweaver.bc.rf.mi.security.IPrincipal principal, java.util.List permissions) Remove list of permissions for the given principal on the given resource identifiers.

Methods inherited from interface com.sap.netweaver.bc.rf.mi.security.ISecurityManager

getSupportedPermissions, isAllowed, isAllowed, isAllowed, isAllowed

Method Detail

grant

public void grant(IResourceHandle resourceHandle,
                  com.sap.netweaver.bc.rf.mi.security.IPrincipal principal,
                  IPermission permission)
           throws ResourceException

Set permission for the given principal on the given resource handle.

Parameters:

resourceHandle - resource handle

principal - principal for whom the permission should be set

permission - single permission to set

Throws:

ResourceException - when wrong parameterized or setting the permission failed

grant

public void grant(IResourceHandle resourceHandle,
                  com.sap.netweaver.bc.rf.mi.security.IPrincipal principal,
                  java.util.List permissions)
           throws ResourceException

Set list of permissions for the given principal on the given resource handle.

Parameters:

resourceHandle - resource handle

principal - principal for whom the permissions should be set

permissions - list of permissions to set

Throws:

ResourceException - when wrong parameterized or setting the permission failed

grant

public void grant(java.util.List ridList,
                  com.sap.netweaver.bc.rf.mi.security.IPrincipal principal,
                  IPermission permission)
           throws ResourceException,
                  OperationNotCompletedException

Set permission for the given principal on the given resource identifiers.

Note: This method needs not to be handled atomically! Although this operation may fail in parts, the operation on one of the many operands provided through the parameter list is always expected to be atomic!

Parameters:

ridList - list of resource identifiers

principal - principal for whom the permissions should be set

permission - single permission to set

Throws:

ResourceException - when wrong parameterized

OperationNotCompletedException - when the operation failed in parts

grant

public void grant(java.util.List ridList,
                  com.sap.netweaver.bc.rf.mi.security.IPrincipal principal,
                  java.util.List permissions)
           throws ResourceException,
                  OperationNotCompletedException

Set list of permissions for the given principal on the given resource identifiers.

Note: This method needs not to be handled atomically! Although this operation may fail in parts, the operation on one of the many operands provided through the parameter list is always expected to be atomic!

Parameters:

ridList - list of resource identifiers

principal - principal for whom the permissions should be set

permissions - list of permissions to set

Throws:

ResourceException - when wrong parameterized

OperationNotCompletedException - when the operation failed in parts

revoke

public void revoke(IResourceHandle resourceHandle,
                   com.sap.netweaver.bc.rf.mi.security.IPrincipal principal,
                   IPermission permission)
            throws ResourceException

Remove permission for the given principal on the given resource handle.

Parameters:

resourceHandle - resource handle

principal - principal for whom the permission should be removed

permission - single permission to remove

Throws:

ResourceException - when wrong parameterized or removing the permission failed

revoke

public void revoke(IResourceHandle resourceHandle,
                   com.sap.netweaver.bc.rf.mi.security.IPrincipal principal,
                   java.util.List permissions)
            throws ResourceException

Remove list of permissions for the given principal on the given resource handle.

Parameters:

resourceHandle - resource handle

principal - principal for whom the permissions should be removed

permissions - list of permissions to remove

Throws:

ResourceException - when wrong parameterized or removing the permission failed

revoke

public void revoke(java.util.List ridList,
                   com.sap.netweaver.bc.rf.mi.security.IPrincipal principal,
                   IPermission permission)
            throws ResourceException,
                   OperationNotCompletedException

Remove permission for the given principal on the given resource identifiers.

Note: This method needs not to be handled atomically! Although this operation may fail in parts, the operation on one of the many operands provided through the parameter list is always expected to be atomic!

Parameters:

ridList - list of resource identifiers

principal - principal for whom the permissions should be removed

permission - single permission to remove

Throws:

ResourceException - when wrong parameterized

OperationNotCompletedException - when the operation failed in parts

revoke

public void revoke(java.util.List ridList,
                   com.sap.netweaver.bc.rf.mi.security.IPrincipal principal,
                   java.util.List permissions)
            throws ResourceException,
                   OperationNotCompletedException

Remove list of permissions for the given principal on the given resource identifiers.

Note: This method needs not to be handled atomically! Although this operation may fail in parts, the operation on one of the many operands provided through the parameter list is always expected to be atomic!

Parameters:

ridList - list of resource identifiers

principal - principal for whom the permissions should be removed

permissions - list of permissions to remove

Throws:

ResourceException - when wrong parameterized

OperationNotCompletedException - when the operation failed in parts