|
Jetty example source code file (StrictRoleCheckPolicy.java)
The Jetty StrictRoleCheckPolicy.java source code// ======================================================================== // $Id: StrictRoleCheckPolicy.java 1001 2006-09-23 09:31:51Z janb $ // Copyright 2003-2004 Mort Bay Consulting Pty. Ltd. // ------------------------------------------------------------------------ // Licensed under the Apache License, Version 2.0 (the "License"); // you may not use this file except in compliance with the License. // You may obtain a copy of the License at // http://www.apache.org/licenses/LICENSE-2.0 // Unless required by applicable law or agreed to in writing, software // distributed under the License is distributed on an "AS IS" BASIS, // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. // See the License for the specific language governing permissions and // limitations under the License. // ======================================================================== package org.mortbay.jetty.plus.jaas; import java.security.Principal; import java.security.acl.Group; import java.util.Enumeration; /* ---------------------------------------------------- */ /** StrictRoleCheckPolicy * <p>Enforces that if a runAsRole is present, then the * role to check must be the same as that runAsRole and * the set of static roles is ignored. * * * * @org.apache.xbean.XBean description ="Check only topmost role in stack of roles for user" */ public class StrictRoleCheckPolicy implements RoleCheckPolicy { public boolean checkRole (String roleName, Principal runAsRole, Group roles) { //check if this user has had any temporary role pushed onto //them. If so, then only check if the user has that role. if (runAsRole != null) { return (roleName.equals(runAsRole.getName())); } else { if (roles == null) return false; Enumeration rolesEnum = roles.members(); boolean found = false; while (rolesEnum.hasMoreElements() && !found) { Principal p = (Principal)rolesEnum.nextElement(); found = roleName.equals(p.getName()); } return found; } } } Other Jetty examples (source code examples)Here is a short list of links related to this Jetty StrictRoleCheckPolicy.java source code file: |
... this post is sponsored by my books ... | |
#1 New Release! |
FP Best Seller |
Copyright 1998-2021 Alvin Alexander, alvinalexander.com
All Rights Reserved.
A percentage of advertising revenue from
pages under the /java/jwarehouse
URI on this website is
paid back to open source projects.