com.redhat.rhn.common.security.acl

Class Access

java.lang.Object

com.redhat.rhn.common.security.acl.BaseHandler

com.redhat.rhn.common.security.acl.Access

All Implemented Interfaces:

AclHandler

public class Access
extends BaseHandler

Access is a concrete implementation of an AclHandler. This is default implementation which is always included when evaluating Acls.

Field Summary

Fields

Modifier and Type	Field and Description
protected static org.apache.log4j.Logger	LOG

Constructor Summary

Constructors

Constructor and Description
Access() Constructor for Access object

Method Summary

Modifier and Type	Method and Description
boolean	aclAllSystemsInSetHaveEntitlement(java.lang.Object ctx, java.lang.String[] params) Check if all systems in the current system have a certain entitlement.
boolean	aclAllSystemsInSetHaveFeature(java.lang.Object ctx, java.lang.String[] params) Check if all systems in the current system have a certain feature.
boolean	aclCanAccessChannel(java.lang.Object ctx, java.lang.String[] params) returns true or false ifthe user has access to a channel
boolean	aclErrataEditable(java.lang.Object ctx, java.lang.String[] params) See if the erratum isn't a Red Hat erratum
boolean	aclFormvarExists(java.lang.Object ctx, java.lang.String[] params) Returns true if the query param exists.
boolean	aclIs(java.lang.Object ctx, java.lang.String[] params) Returns true if the given value in the param is found in the global configuration.
boolean	aclIsProtected(java.lang.Object ctx, java.lang.String[] params)
boolean	aclNeedFirstUser(java.lang.Object ctx, java.lang.String[] p) Returns true if the system is a satellite and has any users.
boolean	aclOrgChannelFamily(java.lang.Object ctx, java.lang.String[] params) TODO: Right now this method calls a small little query very similar to how the perl code decides this acl.
boolean	aclOrgHasProxies(java.lang.Object ctx, java.lang.String[] params) Does the org have any proxies?
boolean	aclOrgRole(java.lang.Object ctx, java.lang.String[] params) Checks if the User's Org has the requested Role.
boolean	aclSystemFeature(java.lang.Object ctx, java.lang.String[] params) Check if a System has a feature
boolean	aclSystemHasManagementEntitlement(java.lang.Object ctx, java.lang.String[] params) Check if any system has a management entitlement
boolean	aclSystemHasVirtualizationEntitlement(java.lang.Object ctx, java.lang.String[] params) Check if a system has virtualization entitlements.
boolean	aclSystemIsInSSM(java.lang.Object ctx, java.lang.String[] params) Check if a system has a management entitlement
boolean	aclSystemIsVirtual(java.lang.Object ctx, java.lang.String[] params) Uses the sid param to decide if a system is a virtual guest
boolean	aclTrustChannelAccess(java.lang.Object ctx, java.lang.String[] params)
boolean	aclUidRole(java.lang.Object ctx, java.lang.String[] params) Returns true if the User whose uid matches the given uid, is in the given Role.
boolean	aclUserAuthenticated(java.lang.Object ctx, java.lang.String[] params) Returns true if the User has been authenticated by the system.
boolean	aclUserCanManageChannels(java.lang.Object ctx, java.lang.String[] params) Returns true if the user is either a channel administrator or an org administrator
boolean	aclUserRole(java.lang.Object ctx, java.lang.String[] params) Returns true if current User is in the Role.

Methods inherited from class com.redhat.rhn.common.security.acl.BaseHandler

aclIsSatellite, getAsLong

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

LOG

protected static final org.apache.log4j.Logger LOG

Constructor Detail

Access

public Access()

Constructor for Access object

Method Detail

aclUidRole

public boolean aclUidRole(java.lang.Object ctx,
                          java.lang.String[] params)

Returns true if the User whose uid matches the given uid, is in the given Role. Requires a uid String in the Context.

Parameters:

ctx - Context Map to pass in

params - Parameters to use to fetch from Context

Returns:

true if access is granted, false otherwise

aclUserRole

public boolean aclUserRole(java.lang.Object ctx,
                           java.lang.String[] params)

Returns true if current User is in the Role. Requires a User in the Context.

Parameters:

ctx - Context Map to pass in

params - Parameters to use to fetch from Context

Returns:

true if access is granted, false otherwise

aclIs

public boolean aclIs(java.lang.Object ctx,
                     java.lang.String[] params)

Returns true if the given value in the param is found in the global configuration.

Parameters:

ctx - Context Map to pass in

params - Parameters to use to fetch from Context

Returns:

true if access is granted, false otherwise

aclOrgChannelFamily

public boolean aclOrgChannelFamily(java.lang.Object ctx,
                                   java.lang.String[] params)

TODO: Right now this method calls a small little query very similar to how the perl code decides this acl. IMO, there is a better way, and we should fix this when we migrate the channels tab.

Parameters:

ctx - Context Map to pass in

params - Parameters to use to fetch from Context

Returns:

true if access is granted, false otherwise

aclOrgHasProxies

public boolean aclOrgHasProxies(java.lang.Object ctx,
                                java.lang.String[] params)

Does the org have any proxies?

Parameters:

ctx - Context Map to pass in

params - Parameters to use to fetch from Context

Returns:

true if the org has proxies, false otherwise

aclSystemFeature

public boolean aclSystemFeature(java.lang.Object ctx,
                                java.lang.String[] params)

Check if a System has a feature

Parameters:

ctx - Context Map to pass in

params - Parameters to use to fetch from Context

Returns:

true if access is granted, false otherwise

aclSystemHasVirtualizationEntitlement

public boolean aclSystemHasVirtualizationEntitlement(java.lang.Object ctx,
                                                     java.lang.String[] params)

Check if a system has virtualization entitlements.

Parameters:

ctx - Context map to pass in.

params - Parameters to use to fetch from context.

Returns:

True if system has virtualization entitlement, false otherwise.

aclAllSystemsInSetHaveEntitlement

public boolean aclAllSystemsInSetHaveEntitlement(java.lang.Object ctx,
                                                 java.lang.String[] params)

Check if all systems in the current system have a certain entitlement.

Parameters:

ctx - Context map to pass in.

params - Parameters to use to fetch from context.

Returns:

true if at all systems in the set have the entitlement passed as params[0]

aclAllSystemsInSetHaveFeature

public boolean aclAllSystemsInSetHaveFeature(java.lang.Object ctx,
                                             java.lang.String[] params)

Check if all systems in the current system have a certain feature.

Parameters:

ctx - Context map to pass in.

params - Parameters to use to fetch from context.

Returns:

true if at all systems in the set have the feature passed as params[0]

aclSystemHasManagementEntitlement

public boolean aclSystemHasManagementEntitlement(java.lang.Object ctx,
                                                 java.lang.String[] params)

Check if any system has a management entitlement

Parameters:

ctx - Context map to pass in.

params - Parameters to use to fetch from context.

Returns:

True if system has management entitlement, false otherwise.

aclSystemIsVirtual

public boolean aclSystemIsVirtual(java.lang.Object ctx,
                                  java.lang.String[] params)

Uses the sid param to decide if a system is a virtual guest

Parameters:

ctx - Context Map to pass in

params - Parameters to use (unused)

Returns:

true if a system is a satellite, false otherwise

aclSystemIsInSSM

public boolean aclSystemIsInSSM(java.lang.Object ctx,
                                java.lang.String[] params)

Check if a system has a management entitlement

Parameters:

ctx - Context map to pass in.

params - Parameters to use to fetch from context.

Returns:

True if system has management entitlement, false otherwise.

aclOrgRole

public boolean aclOrgRole(java.lang.Object ctx,
                          java.lang.String[] params)

Checks if the User's Org has the requested Role. Requires a User in the Context object.

Parameters:

ctx - Context Map to pass in

params - Used to specify the Role label

Returns:

true if access is granted, false otherwise

aclUserAuthenticated

public boolean aclUserAuthenticated(java.lang.Object ctx,
                                    java.lang.String[] params)

Returns true if the User has been authenticated by the system.

Parameters:

ctx - Context Map to pass in

params - Not used

Returns:

true if access is granted, false otherwise

aclNeedFirstUser

public boolean aclNeedFirstUser(java.lang.Object ctx,
                                java.lang.String[] p)

Returns true if the system is a satellite and has any users. NOTE: this is an expensive call with many many users. It is intended to be called from the installer.

Parameters:

ctx - acl context

p - parameters for acl (ignored)

Returns:

true if the system is a satellite and has any users.

aclCanAccessChannel

public boolean aclCanAccessChannel(java.lang.Object ctx,
                                   java.lang.String[] params)

returns true or false ifthe user has access to a channel

Parameters:

ctx - acl context

params - params need the channel id as param 0

Returns:

true if has read access false otherwise

aclUserCanManageChannels

public boolean aclUserCanManageChannels(java.lang.Object ctx,
                                        java.lang.String[] params)

Returns true if the user is either a channel administrator or an org administrator

Parameters:

ctx - acl context

params - parameters for acl (ignored)

Returns:

true if the user is either a channel admin or org admin

aclFormvarExists

public boolean aclFormvarExists(java.lang.Object ctx,
                                java.lang.String[] params)

Returns true if the query param exists.

Parameters:

ctx - acl context

params - parameters for acl (ignored)

Returns:

true if the query param exists.

aclTrustChannelAccess

public boolean aclTrustChannelAccess(java.lang.Object ctx,
                                     java.lang.String[] params)

Parameters:

ctx - acl context

params - parameters for acl (ignored)

Returns:

true if user org is owner of channel

aclIsProtected

public boolean aclIsProtected(java.lang.Object ctx,
                              java.lang.String[] params)

Parameters:

ctx - acl context

params - parameters for acl

Returns:

if channel is protected

aclErrataEditable

public boolean aclErrataEditable(java.lang.Object ctx,
                                 java.lang.String[] params)

See if the erratum isn't a Red Hat erratum

Parameters:

ctx - Our current context, containing the erratum

params - nevim, dal

Returns:

whether the erratum isn't a Red Hat erratum