Class UserOrigReqAccessEvaluator

java.lang.Object
com.netscape.cms.evaluators.UserOrigReqAccessEvaluator
All Implemented Interfaces:
IAccessEvaluator

public class UserOrigReqAccessEvaluator extends Object implements IAccessEvaluator
A class represents a user-origreq user mapping acls evaluator. This is primarily used for renewal. During renewal, the orig_req uid is placed in the SessionContext of the renewal session context to be evaluated by this evaluator

Version:
$Revision$, $Date$
Author:
Christina Fu
  • Field Details

    • logger

      public static org.slf4j.Logger logger
  • Constructor Details

    • UserOrigReqAccessEvaluator

      public UserOrigReqAccessEvaluator()
      Class constructor.
  • Method Details

    • init

      public void init()
      initialization. nothing for now.
      Specified by:
      init in interface IAccessEvaluator
    • getType

      public String getType()
      gets the type name for this acl evaluator
      Specified by:
      getType in interface IAccessEvaluator
      Returns:
      type for this acl evaluator: "user_origreq" or "at_user_origreq"
    • getDescription

      public String getDescription()
      gets the description for this acl evaluator
      Specified by:
      getDescription in interface IAccessEvaluator
      Returns:
      description for this acl evaluator
    • getSupportedOperators

      public String[] getSupportedOperators()
      Description copied from interface: IAccessEvaluator
      Get the supported operators for this evaluator
      Specified by:
      getSupportedOperators in interface IAccessEvaluator
      Returns:
      Supported operators in string array
    • evaluate

      public boolean evaluate(IAuthToken authToken, String type, String op, String value)
      Evaluates the user in AuthToken to see if it's equal to value
      Specified by:
      evaluate in interface IAccessEvaluator
      Parameters:
      authToken - AuthToken from authentication
      type - must be "at_userreq"
      op - must be "="
      value - the request param name
      Returns:
      true if AuthToken userid is same as value, false otherwise
    • evaluate

      public boolean evaluate(String type, String op, String value)
      Evaluates the user in session context to see if it's equal to value
      Specified by:
      evaluate in interface IAccessEvaluator
      Parameters:
      type - must be "user_origreq"
      op - must be "="
      value - the user id
      Returns:
      true if SessionContext uid is same as value, false otherwise