orca.security
Class AccessMonitor

java.lang.Object
  orca.security.AccessMonitor

public class AccessMonitor
extends java.lang.Object

AccessMonitor encapsulates access control policy and any means of proving or gaining access to resources, e.g., payment. This should be an abstract pluggable class.

Each operation on a slices actor includes an AuthToken to represent identity and any ancillary information. AccessMonitor determines whether any given access is permitted, given the AuthToken and a per-object auth.Guard, which encapsulates an access control list.

Field Summary

static int	AccessCreateSlice
static int	AccessOps
static int	AccessReserve
static int	AccessUpdate

Constructor Summary

AccessMonitor()

Method Summary

void	checkAccess(AuthToken auth, Guard guard, int type)
void	checkAccess(AuthToken auth, java.util.Properties properties, Guard guard, int type)
void	checkCreateSlice(AuthToken auth, Guard guard)
void	checkOps(AuthToken auth, Guard guard)
void	checkReserve(AuthToken auth, Guard guard)
void	checkUpdate(AuthToken auth, Guard guard)
java.lang.Object	getCredential(AuthToken auth) Gets the unique identity object associated with an AuthToken.
java.lang.Object	getCredential(java.lang.String name) Gets the unique identity object associated with an identity reference (whose interpretation is implementation-specific).

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

AccessUpdate

public static final int AccessUpdate

See Also:

Constant Field Values

AccessCreateSlice

public static final int AccessCreateSlice

See Also:

Constant Field Values

AccessReserve

public static final int AccessReserve

See Also:

Constant Field Values

AccessOps

public static final int AccessOps

See Also:

Constant Field Values

Constructor Detail

AccessMonitor

public AccessMonitor()

Method Detail

getCredential

public java.lang.Object getCredential(AuthToken auth)
                               throws java.lang.Exception

Gets the unique identity object associated with an AuthToken.

Returns:

identity object (credential)

Throws:

java.lang.Exception

getCredential

public java.lang.Object getCredential(java.lang.String name)
                               throws java.lang.Exception

Gets the unique identity object associated with an identity reference (whose interpretation is implementation-specific).

Returns:

identity object (credential)

Throws:

java.lang.Exception

checkAccess

public void checkAccess(AuthToken auth,
                        Guard guard,
                        int type)
                 throws java.lang.Exception

Throws:

java.lang.Exception

checkAccess

public void checkAccess(AuthToken auth,
                        java.util.Properties properties,
                        Guard guard,
                        int type)
                 throws java.lang.Exception

Throws:

java.lang.Exception

checkUpdate

public void checkUpdate(AuthToken auth,
                        Guard guard)
                 throws java.lang.Exception

Throws:

java.lang.Exception

checkCreateSlice

public void checkCreateSlice(AuthToken auth,
                             Guard guard)
                      throws java.lang.Exception

Throws:

java.lang.Exception

checkReserve

public void checkReserve(AuthToken auth,
                         Guard guard)
                  throws java.lang.Exception

Throws:

java.lang.Exception

checkOps

public void checkOps(AuthToken auth,
                     Guard guard)
              throws java.lang.Exception

Throws:

java.lang.Exception