org.apache.openejb.spi
Interface SecurityService<T>

All Superinterfaces:

Service

All Known Implementing Classes:

AbstractSecurityService, PseudoSecurityService, SecurityServiceImpl

public interface SecurityService<T>
extends Service

The generic value T is any serializable token of the SecurityService implementations choosing. This token only needs to be understandable by the SecurityService internally and need not be a publicly usable class type. No part of the outlying system will make any assumptions as to the type of the object. The use of a java generic type is to express the required symmetry in the interface.

Method Summary

void	associate(T securityIdentity) Active
T	disassociate() Active
Principal	getCallerPrincipal() Implementors are encouraged to return a java.security.Principal object that implements org.apache.openejb.spi.CallerPrincipal JAAS LoginModule implementors are encouraged to use the CallerPrincipal interface to denote the best fitting Principal for getCallerPrincipal.
boolean	isCallerAuthorized(Method method, InterfaceType type) Active
boolean	isCallerInRole(String role) Active
T	login(String user, String pass)
T	login(String securityRealm, String user, String pass)
void	logout(T securityIdentity) Active

Methods inherited from interface org.apache.openejb.spi.Service

init

Method Detail

login

T login(String user,
        String pass)
        throws LoginException

Throws:

LoginException

login

T login(String securityRealm,
        String user,
        String pass)
        throws LoginException

Throws:

LoginException

associate

void associate(T securityIdentity)
               throws LoginException

Active

Throws:

LoginException

disassociate

T disassociate()

Active

logout

void logout(T securityIdentity)
            throws LoginException

Active

Throws:

LoginException

isCallerInRole

boolean isCallerInRole(String role)

Active

getCallerPrincipal

Principal getCallerPrincipal()

Implementors are encouraged to return a java.security.Principal object that implements org.apache.openejb.spi.CallerPrincipal JAAS LoginModule implementors are encouraged to use the CallerPrincipal interface to denote the best fitting Principal for getCallerPrincipal.

isCallerAuthorized

boolean isCallerAuthorized(Method method,
                           InterfaceType type)

Active