Interface Subject
-
- All Superinterfaces:
Cloneable
- All Known Implementing Classes:
AMIdentitySubject,AuthenticatedAgents,AuthenticatedSharedAgents,AuthenticatedUsers,DSAMERole,LDAPGroups,LDAPRoles,LDAPUsers,Organization,PrivilegeSubject,WebServicesClients
@Deprecated public interface Subject extends Cloneable
Deprecated.since 12.0.0, useEntitlementSubjectThe classSubjectdefines a collection of users (or subject) to whom the specifiedPolicyis applied. A complete implementation of this interface can have complex boolean operations to determine if the given user identified by theSSOTokenbelongs to this collection.The interfaces are separated into administrative interfaces and evaluation interfaces. The administrative interfaces will be used by web interface/command line interface component to create a
Subjectobject and the evaluation interfaces will be used by thePolicyEvaluator.
-
-
Method Summary
All Methods Instance Methods Abstract Methods Deprecated Methods Modifier and Type Method Description Objectclone()Deprecated.Creates and returns a copy of this object.StringgetDisplayNameForValue(String value, Locale locale)Deprecated.Returns the display name for the value for the given locale.ValidValuesgetValidValues(SSOToken token)Deprecated.Returns a list of possible values for theSubject.ValidValuesgetValidValues(SSOToken token, String pattern)Deprecated.Returns a list of possible values for theSubjectthat satisfy the givenpattern.SetgetValues()Deprecated.Returns the values that was set using the methodsetValues.SyntaxgetValueSyntax(SSOToken token)Deprecated.Returns the syntax of the values theSubjectimplementation can have.voidinitialize(Map configParams)Deprecated.Initialize (or configure) theSubjectobject.booleanisMember(SSOToken token)Deprecated.Determines if the user belongs to this instance of theSubjectobject.voidsetValues(Set names)Deprecated.Sets the names for the instance of theSubjectobject.
-
-
-
Method Detail
-
getValueSyntax
Syntax getValueSyntax(SSOToken token) throws SSOException, PolicyException
Deprecated.Returns the syntax of the values theSubjectimplementation can have.- Parameters:
token- theSSOTokenthat will be used to determine the syntax- Returns:
Setof valid names for the user collection.- Throws:
SSOException- ifSSOTokenis not validPolicyException- See Also:
Syntax
-
getValidValues
ValidValues getValidValues(SSOToken token) throws SSOException, PolicyException
Deprecated.Returns a list of possible values for theSubject. The implementation must use theSSOTokentoken provided to determine the possible values. For example, in a Role implementation this method will return all the roles defined in the organization.- Parameters:
token- theSSOTokenthat will be used to determine the possible values- Returns:
ValidValuesobject- Throws:
SSOException- ifSSOTokenis not validPolicyException- if unable to get the list of valid names.
-
getValidValues
ValidValues getValidValues(SSOToken token, String pattern) throws SSOException, PolicyException
Deprecated.Returns a list of possible values for theSubjectthat satisfy the givenpattern. The implementation must use theSSOTokentoken provided to determine the possible values. For example, in a Role implementation with the search filter*adminthis method will return all the roles defined in the organization that end withadmin- Parameters:
token- theSSOTokenthat will be used to determine the possible valuespattern- search pattern that will be used to narrow the list of valid names.- Returns:
ValidValuesobject- Throws:
SSOException- ifSSOTokenis not validPolicyException- if unable to get the list of valid names.
-
getDisplayNameForValue
String getDisplayNameForValue(String value, Locale locale) throws NameNotFoundException
Deprecated.Returns the display name for the value for the given locale. For all the valid values obtained through the methodsgetValidValuesthis method must be called by web and command line interface to get the corresponding display name. Thelocalevariable could be used by the plugin to customize the display name for the given locale. Thelocalevariable could benull, in which case the plugin must use the default locale (most probablyen_US). This method returns only the display name and should not be used for the methodsetValues. Alternatively, if the plugin does not have to localize the value, it can just return thevalueas is.- Parameters:
value- one of the valid value for the pluginlocale- locale for which the display name must be customized- Returns:
- the display name for the value for the given locale.
- Throws:
NameNotFoundException- if the givenvalueis not one of the valid values for the plugin
-
getValues
Set getValues()
Deprecated.Returns the values that was set using the methodsetValues.- Returns:
Setof values that have been set for the user collection.
-
initialize
void initialize(Map configParams) throws PolicyException
Deprecated.Initialize (or configure) theSubjectobject. Usually it will be initialized with the environment parameters set by the system administrator via admin console. For example in a Role implementation, the configuration parameters could specify the directory server name, port, etc.- Parameters:
configParams- configuration parameters as aMap. The values in the map isjava.util.Set, which contains one or more configuration parameters.- Throws:
PolicyException- if an error occurred during initialization ofSubjectinstance
-
setValues
void setValues(Set names) throws InvalidNameException
Deprecated.Sets the names for the instance of theSubjectobject. The names are obtained from thePolicyobject, usually configured when a policy is created. For example in a Role implementation, this would be name of the role.- Parameters:
names- names selected for the instance of the user collection object.- Throws:
InvalidNameException- if the given names are not valid
-
isMember
boolean isMember(SSOToken token) throws SSOException, PolicyException
Deprecated.Determines if the user belongs to this instance of theSubjectobject. For example, a Role implementation would returntrueif the user belongs the specified role;falseotherwise.- Parameters:
token- single-sign-on token of the user- Returns:
trueif the user is member of the given subject;falseotherwise.- Throws:
SSOException- if SSO token is not validPolicyException- if an error occurred while checking if the user is a member of this subject
-
clone
Object clone()
Deprecated.Creates and returns a copy of this object.- Returns:
- a copy of this object
-
-