palio.webservices.security
Class UserAuthorizationHandler

java.lang.Object
  palio.webservices.security.UserAuthorizationHandler

Direct Known Subclasses:

PalioUserAuthorizationHandler, ServerAdminAuthorizationHandler

public abstract class UserAuthorizationHandler
extends java.lang.Object

Base class for web service requests authorization for UsernameToken type. Important! All classes that extends this class must have a constructor with following arguments: Instance, WebServiceData.

Author:

Krzysztof Madyniak

Constructor Summary

UserAuthorizationHandler(Instance instance, WebServiceData webServiceData)

Method Summary

abstract void	authorize(java.lang.String username, java.lang.String[] privs) Tries to authorize a user with given identifier.
abstract void	authorize(java.lang.String username, java.lang.String password, java.lang.String[] privs) Tries to authorise a user with given password.
abstract java.lang.String	getPassword(java.lang.String username) Returns given user password (method for digest authorization).

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

UserAuthorizationHandler

public UserAuthorizationHandler(Instance instance,
                                WebServiceData webServiceData)

Parameters:

instance - jPALIO instance.

webServiceData - Web service data.

Method Detail

authorize

public abstract void authorize(java.lang.String username,
                               java.lang.String password,
                               java.lang.String[] privs)

Tries to authorise a user with given password. If authorization failes, some unchecked exception should be thrown (i.e. SecurityException

Parameters:

username - User name

password - Password

privs - Required privileges specified in a configuration

getPassword

public abstract java.lang.String getPassword(java.lang.String username)

Returns given user password (method for digest authorization).

Parameters:

username - User name

Returns:

User password.

authorize

public abstract void authorize(java.lang.String username,
                               java.lang.String[] privs)

Tries to authorize a user with given identifier. No password required.

Parameters:

username - User name

privs - Required privileges specified in a configuration