de.fzj.unicore.uas.security
Class AccessControl

java.lang.Object
  de.fzj.unicore.uas.security.AccessControl

All Implemented Interfaces:

de.fzj.unicore.wsrflite.xfire.AccessControlInterceptor

public class AccessControl
extends java.lang.Object
implements de.fzj.unicore.wsrflite.xfire.AccessControlInterceptor

Access control for WSRF services. The access control can be enabled/disabled by setting a property IUASSecurityProperties.UAS_CHECKACCESS in the uas.config file.

• For plain WSRF services such as the Registry and for non-WSRF services the Access control needs to be explicitely enabled, by setting a property uas.security.accesscontrol.SERVICE_NAME=true where SERVICE_NAME is the service name as defined in wsrflite.xml
• For other UNICORE services the access control is enabled by default, but can be controlled individually by setting the uas.security.accesscontrol.SERVICE_NAME property

Author:

schuller

Field Summary

protected static org.apache.log4j.Logger

logger

Constructor Summary

AccessControl()
set up the security check infrastructure

Method Summary

void	checkAccess(java.lang.Object target, java.lang.String action, org.codehaus.xfire.MessageContext context) perform the access control check
static boolean	isCheckForced(java.lang.String serviceName) checks if the security check is explicitely ENABLED for the given service, i.e. only the per-service property uas.security.accesscontrol.SERVICENAME is checked.
static boolean	isCheckingService(java.lang.String serviceName) check whether access control is enabled, by checking checking the per-service property uas.security.accesscontrol.SERVICENAME checking the general property uas.security.accesscontrol

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

logger

protected static final org.apache.log4j.Logger logger

Constructor Detail

AccessControl

public AccessControl()

set up the security check infrastructure

Method Detail

checkAccess

public void checkAccess(java.lang.Object target,
                        java.lang.String action,
                        org.codehaus.xfire.MessageContext context)

perform the access control check

Specified by:

checkAccess in interface de.fzj.unicore.wsrflite.xfire.AccessControlInterceptor

isCheckingService

public static boolean isCheckingService(java.lang.String serviceName)

check whether access control is enabled, by checking

• checking the per-service property uas.security.accesscontrol.SERVICENAME
• checking the general property uas.security.accesscontrol

Parameters:

serviceName -

Returns:

isCheckForced

public static boolean isCheckForced(java.lang.String serviceName)

checks if the security check is explicitely ENABLED for the given service, i.e. only the per-service property uas.security.accesscontrol.SERVICENAME is checked.