Package org.jboss.security

Examples of org.jboss.security.AuthorizationManager

160
161
162
163
164
165
166
167
168
169
170
   @ManagementOperation(description = "Get the authorization manager for the specified security domain",
         params = {@ManagementParameter(name = "securityDomain", description = "The security domain name")})
   public AuthorizationManager getAuthorizationManager(String securityDomain)
   {
      initialize();
      AuthorizationManager am = null;
      try
      {
         am = this.authzMgrMap.get(securityDomain);
         if(am == null)
         {
View Full Code Here
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
         SecurityConstraint[] constraints, Context context) throws IOException
   {
      boolean isAuthorized = super.hasResourcePermission(request, response,
                                   constraints, context);
      log.debug("Super class has authorized="+isAuthorized);
      AuthorizationManager authzManager = null;
      try
      {
         authzManager = this.getAuthorizationManager();
      }
      catch(Exception e)
      {
         log.error("Error obtaining Authorization Manager:",e);
      }
     
      final HashMap map =  new HashMap();
      map.put("catalina.request",request);
      map.put("catalina.constraints",constraints);
      map.put("catalina.context", context);
      map.put("authorizationManager",authzManager);
      WebResource resource = new WebResource(map);
      try
      {
         int check = authzManager.authorize(resource);
         isAuthorized = (check == AuthorizationContext.PERMIT);
      }
      catch (Exception e)
      {
         isAuthorized = false;
View Full Code Here
162
163
164
165
166
167
168
169
170
171
172
173
174
175
        RunAs runAs = securityContext.getIncomingRunAs();
        if (runAs != null && runAs instanceof RunAsIdentity) {
            RunAsIdentity runAsIdentity = (RunAsIdentity) runAs;
            roleGroup = runAsIdentity.getRunAsRolesAsRoleGroup();
        } else {
            AuthorizationManager am = securityContext.getAuthorizationManager();
            SecurityContextCallbackHandler scb = new SecurityContextCallbackHandler(securityContext);

            roleGroup = am.getSubjectRoles(securityContext.getSubjectInfo().getAuthenticatedSubject(), scb);
        }

        List<Role> roles = roleGroup.getRoles();

        // TODO - Review most performant way.
View Full Code Here
116
117
118
119
120
121
122
123
124
125
126
        return am;
    }

    /** {@inheritDoc} */
    public AuthorizationManager getAuthorizationManager(String securityDomain) {
        AuthorizationManager am = null;
        try {
            am = authzMgrMap.get(securityDomain);
            if (am == null) {
                am = (AuthorizationManager) lookUpJNDI(securityDomain + "/authorizationMgr");
                authzMgrMap.put(securityDomain, am);
View Full Code Here
112
113
114
115
116
117
118
119
120
121
122
        return am;
    }

    /** {@inheritDoc} */
    public AuthorizationManager getAuthorizationManager(String securityDomain) {
        AuthorizationManager am = null;
        try {
            am = authzMgrMap.get(securityDomain);
            if (am == null) {
                am = (AuthorizationManager) lookUpJNDI(securityDomain + "/authorizationMgr");
                authzMgrMap.put(securityDomain, am);
View Full Code Here
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
         SecurityConstraint[] constraints, Context context) throws IOException
   {
      boolean isAuthorized = super.hasResourcePermission(request, response,
                                   constraints, context);
      log.debug("Super class has authorized="+isAuthorized);
      AuthorizationManager authzManager = null;
      try
      {
         authzManager = this.getAuthorizationManager();
      }
      catch(Exception e)
      {
         log.error("Error obtaining Authorization Manager:",e);
      }
     
      final HashMap map =  new HashMap();
      map.put("catalina.request",request);
      map.put("catalina.constraints",constraints);
      map.put("catalina.context", context);
      map.put("authorizationManager",authzManager);
      WebResource resource = new WebResource(map);
      try
      {
         int check = authzManager.authorize(resource);
         isAuthorized = (check == AuthorizationContext.PERMIT);
      }
      catch (Exception e)
      {
         isAuthorized = false;
View Full Code Here
136
137
138
139
140
141
142
143
144
145
146
147
148
149
        if (runAs != null && runAs instanceof RunAsIdentity) {
            RunAsIdentity runAsIdentity = (RunAsIdentity) runAs;
            roleGroup = runAsIdentity.getRunAsRolesAsRoleGroup();
        } else {

            AuthorizationManager am = securityContext.getAuthorizationManager();
            SecurityContextCallbackHandler scb = new SecurityContextCallbackHandler(securityContext);

            roleGroup = am.getSubjectRoles(securityContext.getSubjectInfo().getAuthenticatedSubject(), scb);
        }

        List<Role> roles = roleGroup.getRoles();

        // TODO - Review most performant way.
View Full Code Here
110
111
112
113
114
115
116
117
118
119
120
        return am;
    }

    /** {@inheritDoc} */
    public AuthorizationManager getAuthorizationManager(String securityDomain) {
        AuthorizationManager am = null;
        try {
            am = authzMgrMap.get(securityDomain);
            if (am == null) {
                am = (AuthorizationManager) lookUpJNDI(securityDomain + "/authorizationMgr");
                authzMgrMap.put(securityDomain, am);
View Full Code Here
155
156
157
158
159
160
161
162
163
164
165
   @ManagementOperation(description = "Get the authorization manager for the specified security domain",
         params = {@ManagementParameter(name = "securityDomain", description = "The security domain name")})
   public AuthorizationManager getAuthorizationManager(String securityDomain)
   {
      initialize();
      AuthorizationManager am = null;
      try
      {
         am = this.authzMgrMap.get(securityDomain);
         if(am == null)
         {
View Full Code Here
446
447
448
449
450
451
452
453
454
    @see java.security.acl.Group;
    @see Subject#getPrincipals()
    */
   public boolean doesUserHaveRole(Principal principal, Set<Principal> rolePrincipals)
   {
      AuthorizationManager am = SecurityUtil.getAuthorizationManager(securityDomain,
            SecurityConstants.JAAS_CONTEXT_ROOT);
      return am.doesUserHaveRole(principal, rolePrincipals);
   }
View Full Code Here
TOP

Related Classes of org.jboss.security.AuthorizationManager

  • org.jboss.as.security.plugins.JNDIBasedSecurityManagement
  • org.jboss.as.security.service.SimpleSecurityManager
  • org.jboss.as.web.deployment.WarDeploymentProcessor
  • org.jboss.ejb.EjbModule
  • org.jboss.jms.server.jbosssx.JBossASSecurityMetadataStore
  • org.jboss.security.authorization.modules.ejb.EJBJACCPolicyModuleDelegate
  • org.jboss.security.authorization.modules.ejb.EJBPolicyModuleDelegate
  • org.jboss.security.authorization.modules.ejb.EJBXACMLPolicyModuleDelegate
  • org.jboss.security.authorization.modules.web.WebXACMLPolicyModuleDelegate
  • org.jboss.security.integration.ejb.EJBAuthorizationHelper
    • Copyright © 2018 www.massapicom. All rights reserved.
    All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.