com.haulmont.cuba.security.role

Class RoleDefinitionsJoiner

java.lang.Object

com.haulmont.cuba.security.role.RoleDefinitionsJoiner

public class RoleDefinitionsJoiner
extends java.lang.Object

Class is used to build a new RoleDefinition from multiple other role definitions. Roles are joined using the following rules:

• if only one role defines a permission on some target then this permission value is set to the resulting role
• if both roles have explicit permissions on some target then a permission that allows more is selected
• if one role has an explicit target, the second role doesn't, but the second role defines a wildcard permission, then the value that allows more (explicit from the first role or wildcard from the second role) is set as an explicit permission for the resulting role
• if both roles define wildcard permissions then the wildcard permission that allows more is selected

Constructor Summary

Constructors

Constructor and Description
RoleDefinitionsJoiner()

Method Summary

Modifier and Type	Method and Description
static RoleDefinition	join(java.util.Collection<RoleDefinition> roles) Builds new RoleDefinition by joining a collection of role definitions.
static RoleDefinition	join(RoleDefinition role1, RoleDefinition role2) Builds new RoleDefinition by joining two role definitions.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

RoleDefinitionsJoiner

public RoleDefinitionsJoiner()

Method Detail

join

public static RoleDefinition join(java.util.Collection<RoleDefinition> roles)

Builds new RoleDefinition by joining a collection of role definitions.

Returns:

a new RoleDefinition that contains joined permissions

join

public static RoleDefinition join(RoleDefinition role1,
                                  RoleDefinition role2)

Builds new RoleDefinition by joining two role definitions.

Returns:

a new RoleDefinition that contains joined permissions