com.goldencode.p2j.security

Class AuditTarget

java.lang.Object

com.goldencode.p2j.security.AuditTarget

class AuditTarget
extends java.lang.Object

Represents a security audit target which is an instance of an abstract resource.

Filtering is done by instance name and by access mode independently. These are the combinations and how they are interpreted. A combination is an instance name and a list of access modes. Either or both can be empty.

• {nothing, nothing}
  this combination means "all";
• {nothing, list of access modes};
  this combination means "any instance, specified access modes only";
• {instance, nothing}
  this combination means "any access mode for this instance";
• {instance, list of access modes};
  this combination means "this instance, specified access modes only";

All combinations are kept in a Map. The key in this map is the instance name, and the value is a Set, possibly empty, which holds access modes.

When a request comes to filter a record, two searches are done agains the Map:

• specified name.
• null as the instance name, which means "any name";

Each request may return a list of access modes or null. The latter means a match, otherwise the access mode is compared with the list.

Field Summary

Fields

Modifier and Type	Field and Description
private java.util.Map	target keeps the instance and list of access modes combinations

Constructor Summary

Constructors

Constructor and Description
AuditTarget() Package private constructor.

Method Summary

Modifier and Type	Method and Description
(package private) void	addTarget(java.lang.String instance, java.lang.Integer[] modes) Adds another combination to the map of targets.
private static boolean	checkMode(java.util.Set values, int value) Checks the given integer for a match in the given array.
(package private) boolean	checkTarget(java.lang.String instance, int mode) Checks the given resource instance and access mode to see if they are a valid audit target.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

target

private java.util.Map target

keeps the instance and list of access modes combinations

Constructor Detail

AuditTarget

AuditTarget()

Package private constructor.

Method Detail

checkMode

private static boolean checkMode(java.util.Set values,
                                 int value)

Checks the given integer for a match in the given array.

Parameters:

values - Set of integers to be checked

value - integer value

Returns:

true if the specified value has the match in the set or the latter is empty

addTarget

void addTarget(java.lang.String instance,
               java.lang.Integer[] modes)

Adds another combination to the map of targets. If a target with the given instance name exists in the map, the access modes are merged.

Parameters:

instance - resource instance name or null

modes - array of access modes or null

checkTarget

boolean checkTarget(java.lang.String instance,
                    int mode)

Checks the given resource instance and access mode to see if they are a valid audit target.

Parameters:

instance - resource instance name

mode - access mode (requested rights)

Returns:

true if the specified combination is a valid audit target