Package org.jboss.security.authorization
Interface AuthorizationModule
-
- All Known Implementing Classes:
AbstractAuthorizationModule,AllDenyAuthorizationModule,AllPermitAuthorizationModule,DelegatingAuthorizationModule,JACCAuthorizationModule,PicketBoxAuthorizationModule,WebAuthorizationModule,XACMLAuthorizationModule
public interface AuthorizationModuleRepresents a Policy Decision Module that is used by the Authorization Context- Since:
- Jun 11, 2006
- Version:
- $Revision: 45685 $
- Author:
- Anil Saldhana
-
-
Method Summary
All Methods Instance Methods Abstract Methods Modifier and Type Method Description booleanabort()Abort the Authorization Processintauthorize(Resource resource)Authorize the resourcebooleancommit()Overall authorization process has succeeded.booleandestroy()A final cleanup opportunity offeredvoidinitialize(Subject subject, CallbackHandler handler, Map<String,Object> sharedState, Map<String,Object> options, RoleGroup roles)Initialize the module
-
-
-
Method Detail
-
abort
boolean abort() throws AuthorizationExceptionAbort the Authorization Process- Returns:
- true - abort passed, false-otherwise
- Throws:
AuthorizationException
-
commit
boolean commit() throws AuthorizationExceptionOverall authorization process has succeeded. The module can commit any decisions it has made, with third party systems like a database.- Returns:
- Throws:
AuthorizationException
-
initialize
void initialize(Subject subject, CallbackHandler handler, Map<String,Object> sharedState, Map<String,Object> options, RoleGroup roles)
Initialize the module- Parameters:
subject- the authenticated subjecthandler- CallbackHandlersharedState- state shared with other configured modulesoptions- options specified in the Configuration for this particular moduleroles- Roles of the subject
-
authorize
int authorize(Resource resource)
Authorize the resource- Parameters:
resource-- Returns:
- AuthorizationContext.PERMIT or AuthorizationContext.DENY
-
destroy
boolean destroy()
A final cleanup opportunity offered- Returns:
- cleanup by the module passed or not
-
-