Examples of org.apache.ldap.server.authz.support.ACDFEngine

org.apache.ldap.server.authz.support.ACDFEngine

An implementation of Access Control Decision Function (18.8, X.501).

This engine simply filters the collection of tuples using the following {@link ACITupleFilter}s sequentially:

{@link RelatedUserClassFilter}
{@link RelatedProtectedItemFilter}
{@link MaxValueCountFilter}
{@link MaxImmSubFilter}
{@link RestrictedByFilter}
{@link MicroOperationFilter}
{@link HighestPrecedenceFilter}
{@link MostSpecificUserClassFilter}
{@link MostSpecificProtectedItemFilter}

Operation is determined to be permitted if and only if there is at least one tuple left and all of them grants the access. (18.8.4. X.501) @author The Apache Directory Project @version $Rev: 326083 $, $Date: 2005-10-18 06:59:38 -0400 (Tue, 18 Oct 2005) $

        super.init( factoryCfg, cfg );
        tupleCache = new TupleCache( factoryCfg );
        groupCache = new GroupCache( factoryCfg );
        attrRegistry = factoryCfg.getGlobalRegistries().getAttributeTypeRegistry();
        aciParser = new ACIItemParser( new ConcreteNameComponentNormalizer( attrRegistry ) );
        engine = new ACDFEngine( factoryCfg.getGlobalRegistries().getOidRegistry(), attrRegistry );
        chain = factoryCfg.getInterceptorChain();
        enabled = factoryCfg.getStartupConfiguration().isAccessControlEnabled();
    }

Examples of org.apache.ldap.server.authz.support.ACDFEngine

Related Classes of org.apache.ldap.server.authz.support.ACDFEngine