Package org.forgerock.openam.rest.authz

This package contains the authorization filters for end points.

Class Summary

Class	Description
AdminOnlyAuthzModule	Filter which ensures that only users with an SSO Token which has Administrator-level access are allowed access to the resources protected.
AgentOnlyAuthzModule	Authorization module that only grants access to agents (e.g. web agent, J2EE agent, SOAP STS).
AnyPrivilegeAuthzModule	An authorization module that permits a privileged user from any realm to get access to the requested realm.
CrestPrivilegeAuthzModule	A CREST authorization module for performing privilege checking, see PrivilegeAuthzModule for more detail.
LoggingAuthzModule	An Authorization module which performs no authorization itself, but wraps other authz modules so that they write their success/failures out to an audit file.
PrivilegeWriteAndAnyPrivilegeReadOnlyAuthzModule	An authorization module that permits a privileged user from the requested realm or a parent read and write access, and permits any other privileged user read-only access.
ResourceOwnerOrSuperUserAuthzModule
SpecialAndAdminUserOnlyAuthzModule	This AuthzModule checks for the presence of the user corresponding to the token returned from AccessController.doPrivileged(AdminTokenAction.getInstance()), or other special user, as evaluated by AuthD#isSpecialUser.
SpecialOrAdminOrAgentAuthzModule	Authorization module that only grants access to agents (e.g. web agent, J2EE agent, SOAP STS).
SSOTokenAuthzModule
STSPublishServiceAuthzModule	This is an authz module specific for the STS publish service.
STSTokenGenerationServiceAuthzModule	This CrestAuthorizationModule protects the token generation service.