uk.org.ogsadai.examples.authorization
Class SimpleFileAuthorizer

java.lang.Object
  |
  +--uk.org.ogsadai.examples.authorization.SimpleFileAuthorizer

All Implemented Interfaces:

AccessAuthorizer

Direct Known Subclasses:

UpdateableFileAuthorizer

public class SimpleFileAuthorizer

extends java.lang.Object

implements AccessAuthorizer

A simple file-based implementation of the AccessAuthorizer interface which loads an access control list from a file.

Author:

The OGSA-DAI Team.

resourceAuthorization

protected java.util.Map resourceAuthorization

Maps a resource ID to a set of users that are authorized to access the resource.

activityAuthorization

protected java.util.Map activityAuthorization

Maps an activity name to a set of users that are authorized to access the activity.

SimpleFileAuthorizer

public SimpleFileAuthorizer(java.lang.String?config)
                     throws java.lang.Exception

Constructor. Populates the access control lists.

Parameters:

config - location of the configuration file

Throws:

java.lang.Exception

authorizeResource

public boolean authorizeResource(java.lang.String?resourceID,
                                 SecurityContext?context)

Authorizes access to a resource based on an access control list.

Specified by:

authorizeResource in interface AccessAuthorizer

Parameters:

resourceID - resource to be accessed

context - security context of the request

Returns:

boolean indicating whether the resource can be accessed within the given security context.

authorizeActivity

public boolean authorizeActivity(java.lang.String?resourceID,
                                 Activity?activity,
                                 SecurityContext?context)

Authorizes access to an activity based on an access control list. The resourceID is ignored.

Specified by:

authorizeActivity in interface AccessAuthorizer

Parameters:

resourceID - resource identifier

activity - activity object to be accessed

context - context of the request

Returns:

boolean value indicating whether access has been granted or denied.