summaryrefslogtreecommitdiffstats
path: root/pki/base/common/src/com/netscape/certsrv/authorization
diff options
context:
space:
mode:
Diffstat (limited to 'pki/base/common/src/com/netscape/certsrv/authorization')
-rw-r--r--pki/base/common/src/com/netscape/certsrv/authorization/AuthzManagerProxy.java11
-rw-r--r--pki/base/common/src/com/netscape/certsrv/authorization/AuthzMgrPlugin.java12
-rw-r--r--pki/base/common/src/com/netscape/certsrv/authorization/AuthzResources.java4
-rw-r--r--pki/base/common/src/com/netscape/certsrv/authorization/AuthzToken.java69
-rw-r--r--pki/base/common/src/com/netscape/certsrv/authorization/EAuthzAccessDenied.java3
-rw-r--r--pki/base/common/src/com/netscape/certsrv/authorization/EAuthzException.java12
-rw-r--r--pki/base/common/src/com/netscape/certsrv/authorization/EAuthzInternalError.java1
-rw-r--r--pki/base/common/src/com/netscape/certsrv/authorization/EAuthzMgrNotFound.java1
-rw-r--r--pki/base/common/src/com/netscape/certsrv/authorization/EAuthzMgrPluginNotFound.java1
-rw-r--r--pki/base/common/src/com/netscape/certsrv/authorization/EAuthzUnknownOperation.java4
-rw-r--r--pki/base/common/src/com/netscape/certsrv/authorization/EAuthzUnknownProtectedRes.java4
-rw-r--r--pki/base/common/src/com/netscape/certsrv/authorization/IAuthzManager.java71
-rw-r--r--pki/base/common/src/com/netscape/certsrv/authorization/IAuthzSubsystem.java33
13 files changed, 90 insertions, 136 deletions
diff --git a/pki/base/common/src/com/netscape/certsrv/authorization/AuthzManagerProxy.java b/pki/base/common/src/com/netscape/certsrv/authorization/AuthzManagerProxy.java
index ed0df89a..0960311e 100644
--- a/pki/base/common/src/com/netscape/certsrv/authorization/AuthzManagerProxy.java
+++ b/pki/base/common/src/com/netscape/certsrv/authorization/AuthzManagerProxy.java
@@ -17,10 +17,10 @@
// --- END COPYRIGHT BLOCK ---
package com.netscape.certsrv.authorization;
+
/**
- * A class represents an authorization manager. It contains an authorization
- * manager instance and its state (enable or not).
- *
+ * A class represents an authorization manager. It contains an
+ * authorization manager instance and its state (enable or not).
* @version $Revision$, $Date$
*/
public class AuthzManagerProxy {
@@ -29,10 +29,9 @@ public class AuthzManagerProxy {
/**
* Constructor
- *
* @param enable true if the authzMgr is enabled; false otherwise
* @param mgr authorization manager instance
- */
+ */
public AuthzManagerProxy(boolean enable, IAuthzManager mgr) {
mEnable = enable;
mMgr = mgr;
@@ -40,7 +39,6 @@ public class AuthzManagerProxy {
/**
* Returns the state of the authorization manager instance
- *
* @return true if the state of the authorization manager instance is
* enabled; false otherwise.
*/
@@ -50,7 +48,6 @@ public class AuthzManagerProxy {
/**
* Returns an authorization manager instance.
- *
* @return an authorization manager instance
*/
public IAuthzManager getAuthzManager() {
diff --git a/pki/base/common/src/com/netscape/certsrv/authorization/AuthzMgrPlugin.java b/pki/base/common/src/com/netscape/certsrv/authorization/AuthzMgrPlugin.java
index 7aac318d..b9d9bb96 100644
--- a/pki/base/common/src/com/netscape/certsrv/authorization/AuthzMgrPlugin.java
+++ b/pki/base/common/src/com/netscape/certsrv/authorization/AuthzMgrPlugin.java
@@ -17,10 +17,13 @@
// --- END COPYRIGHT BLOCK ---
package com.netscape.certsrv.authorization;
+
+
+
/**
* This class represents a registered authorization manager plugin.
* <P>
- *
+ *
* @version $Revision$, $Date$
*/
public class AuthzMgrPlugin {
@@ -31,7 +34,6 @@ public class AuthzMgrPlugin {
/**
* Constructs a AuthzManager plugin.
- *
* @param id authz manager implementation name
* @param classPath class path
*/
@@ -39,10 +41,9 @@ public class AuthzMgrPlugin {
mId = id;
mClassPath = classPath;
}
-
+
/**
* Returns an authorization manager implementation name
- *
* @return an authorization manager implementation name
*/
public String getId() {
@@ -51,7 +52,6 @@ public class AuthzMgrPlugin {
/**
* Returns a classpath of a AuthzManager plugin
- *
* @return a classpath of a AuthzManager plugin
*/
public String getClassPath() {
@@ -60,7 +60,6 @@ public class AuthzMgrPlugin {
/**
* Returns a visibility of the plugin
- *
* @return a visibility of the plugin
*/
public boolean isVisible() {
@@ -69,7 +68,6 @@ public class AuthzMgrPlugin {
/**
* Sets visibility of the plugin
- *
* @param visibility visibility of the plugin
*/
public void setVisible(boolean visibility) {
diff --git a/pki/base/common/src/com/netscape/certsrv/authorization/AuthzResources.java b/pki/base/common/src/com/netscape/certsrv/authorization/AuthzResources.java
index 13d33c21..7cb5240a 100644
--- a/pki/base/common/src/com/netscape/certsrv/authorization/AuthzResources.java
+++ b/pki/base/common/src/com/netscape/certsrv/authorization/AuthzResources.java
@@ -17,12 +17,13 @@
// --- END COPYRIGHT BLOCK ---
package com.netscape.certsrv.authorization;
+
import java.util.ListResourceBundle;
+
/**
* A class represents a resource bundle for the authorization subsystem
* <P>
- *
* @deprecated
* @version $Revision$, $Date$
*/
@@ -30,7 +31,6 @@ public class AuthzResources extends ListResourceBundle {
/**
* Returns the content of this resource.
- *
* @return the content of this resource
*/
public Object[][] getContents() {
diff --git a/pki/base/common/src/com/netscape/certsrv/authorization/AuthzToken.java b/pki/base/common/src/com/netscape/certsrv/authorization/AuthzToken.java
index 028f55a8..a0f7133a 100644
--- a/pki/base/common/src/com/netscape/certsrv/authorization/AuthzToken.java
+++ b/pki/base/common/src/com/netscape/certsrv/authorization/AuthzToken.java
@@ -17,19 +17,21 @@
// --- END COPYRIGHT BLOCK ---
package com.netscape.certsrv.authorization;
+
import java.util.Date;
import java.util.Enumeration;
import java.util.Hashtable;
import com.netscape.certsrv.base.IAttrSet;
+
/**
- * Authorization token returned by Authorization Managers. Upon return, it
- * contains the name of the authorization manager that create the AuthzToken,
- * the plugin name of the authorization manager, time of authorization happened,
- * name of the resource, type of operation performed on the resource.
+ * Authorization token returned by Authorization Managers.
+ * Upon return, it contains the name of the authorization manager that create
+ * the AuthzToken, the plugin name of the authorization manager, time of
+ * authorization happened, name of the resource, type of operation performed
+ * on the resource.
* <p>
- *
* @version $Revision$, $Date$
*/
public class AuthzToken implements IAttrSet {
@@ -41,19 +43,19 @@ public class AuthzToken implements IAttrSet {
private Hashtable mAttrs = null;
/**
- * Plugin name of the authorization manager that created the AuthzToken as a
- * string.
+ * Plugin name of the authorization manager that created the
+ * AuthzToken as a string.
*/
public static final String TOKEN_AUTHZMGR_IMPL_NAME = "authzMgrImplName";
/**
- * Name of the authorization manager that created the AuthzToken as a
- * string.
+ * Name of the authorization manager that created the AuthzToken
+ * as a string.
*/
public static final String TOKEN_AUTHZMGR_INST_NAME = "authzMgrInstName";
/**
- * Time of authorization as a java.util.Date
+ * Time of authorization as a java.util.Date
*/
public static final String TOKEN_AUTHZTIME = "authzTime";
@@ -63,7 +65,7 @@ public class AuthzToken implements IAttrSet {
public static final String TOKEN_AUTHZ_RESOURCE = "authzRes";
/**
- * name of the operation
+ * name of the operation
*/
public static final String TOKEN_AUTHZ_OPERATION = "authzOp";
@@ -71,45 +73,41 @@ public class AuthzToken implements IAttrSet {
* Status of the authorization evaluation
*/
public static final String TOKEN_AUTHZ_STATUS = "status";
-
+
/**
- * Constant for the success status of the authorization evaluation.
+ * Constant for the success status of the authorization evaluation.
*/
public static final String AUTHZ_STATUS_SUCCESS = "statusSuccess";
/**
- * Constructs an instance of a authorization token. The token by default
- * contains the following attributes: <br>
- *
+ * Constructs an instance of a authorization token.
+ * The token by default contains the following attributes: <br>
* <pre>
- * "authzMgrInstName" - The authorization manager instance name.
- * "authzMgrImplName" - The authorization manager plugin name.
- * "authzTime" - The - The time of authorization.
+ * "authzMgrInstName" - The authorization manager instance name.
+ * "authzMgrImplName" - The authorization manager plugin name.
+ * "authzTime" - The - The time of authorization.
* </pre>
- *
* @param authzMgr The authorization manager that created this Token.
*/
public AuthzToken(IAuthzManager authzMgr) {
mAttrs = new Hashtable();
- mAttrs.put(TOKEN_AUTHZMGR_INST_NAME, authzMgr.getName());
- mAttrs.put(TOKEN_AUTHZMGR_IMPL_NAME, authzMgr.getImplName());
+ mAttrs.put(TOKEN_AUTHZMGR_INST_NAME, authzMgr.getName());
+ mAttrs.put(TOKEN_AUTHZMGR_IMPL_NAME, authzMgr.getImplName());
mAttrs.put(TOKEN_AUTHZTIME, new Date());
}
/**
* Get the value of an attribute in the AuthzToken
- *
* @param attrName The attribute name
- * @return The value of attrName if any.
+ * @return The value of attrName if any.
*/
public Object get(String attrName) {
return mAttrs.get(attrName);
}
/**
- * Used by an Authorization manager to set an attribute and value in the
- * AuthzToken.
- *
+ * Used by an Authorization manager to set an attribute and value
+ * in the AuthzToken.
* @param attrName The name of the attribute
* @param value The value of the attribute to set.
*/
@@ -119,7 +117,6 @@ public class AuthzToken implements IAttrSet {
/**
* Removes an attribute in the AuthzToken
- *
* @param attrName The name of the attribute to remove.
*/
public void delete(String attrName) {
@@ -128,7 +125,6 @@ public class AuthzToken implements IAttrSet {
/**
* Enumerate all attribute names in the AuthzToken.
- *
* @return Enumeration of all attribute names in this AuthzToken.
*/
public Enumeration getElements() {
@@ -137,7 +133,6 @@ public class AuthzToken implements IAttrSet {
/**
* Enumerate all attribute values in the AuthzToken.
- *
* @return Enumeration of all attribute names in this AuthzToken.
*/
public Enumeration getVals() {
@@ -145,11 +140,10 @@ public class AuthzToken implements IAttrSet {
}
/**
- * Gets the name of the authorization manager instance that created this
- * token.
- *
- * @return The name of the authorization manager instance that created this
- * token.
+ * Gets the name of the authorization manager instance that created
+ * this token.
+ * @return The name of the authorization manager instance that created
+ * this token.
*/
public String getAuthzManagerInstName() {
return ((String) mAttrs.get(TOKEN_AUTHZMGR_INST_NAME));
@@ -158,9 +152,8 @@ public class AuthzToken implements IAttrSet {
/**
* Gets the plugin name of the authorization manager that created this
* token.
- *
* @return The plugin name of the authorization manager that created this
- * token.
+ * token.
*/
public String getAuthzManagerImplName() {
return ((String) mAttrs.get(TOKEN_AUTHZMGR_IMPL_NAME));
@@ -168,10 +161,10 @@ public class AuthzToken implements IAttrSet {
/**
* Gets the time of authorization.
- *
* @return The time of authorization
*/
public Date getAuthzTime() {
return ((Date) mAttrs.get(TOKEN_AUTHZTIME));
}
}
+
diff --git a/pki/base/common/src/com/netscape/certsrv/authorization/EAuthzAccessDenied.java b/pki/base/common/src/com/netscape/certsrv/authorization/EAuthzAccessDenied.java
index 9fc7777c..18429c98 100644
--- a/pki/base/common/src/com/netscape/certsrv/authorization/EAuthzAccessDenied.java
+++ b/pki/base/common/src/com/netscape/certsrv/authorization/EAuthzAccessDenied.java
@@ -29,10 +29,9 @@ public class EAuthzAccessDenied extends EAuthzException {
/**
* Constructs a exception for access denied by Authz manager
- *
* @param errorString Detailed error message.
*/
public EAuthzAccessDenied(String errorString) {
- super(errorString);
+ super(errorString);
}
}
diff --git a/pki/base/common/src/com/netscape/certsrv/authorization/EAuthzException.java b/pki/base/common/src/com/netscape/certsrv/authorization/EAuthzException.java
index b031e994..869a021c 100644
--- a/pki/base/common/src/com/netscape/certsrv/authorization/EAuthzException.java
+++ b/pki/base/common/src/com/netscape/certsrv/authorization/EAuthzException.java
@@ -17,12 +17,12 @@
// --- END COPYRIGHT BLOCK ---
package com.netscape.certsrv.authorization;
+
import com.netscape.certsrv.base.EBaseException;
/**
* This class represents authorization exceptions.
* <P>
- *
* @version $Revision$, $Date$
*/
public class EAuthzException extends EBaseException {
@@ -34,13 +34,11 @@ public class EAuthzException extends EBaseException {
/**
* Resource class name.
*/
- private static final String AUTHZ_RESOURCES = AuthzResources.class
- .getName();
+ private static final String AUTHZ_RESOURCES = AuthzResources.class.getName();
/**
* Constructs a authz exception
* <P>
- *
* @param msgFormat exception details
*/
public EAuthzException(String msgFormat) {
@@ -48,9 +46,8 @@ public class EAuthzException extends EBaseException {
}
/**
- * Constructs a authz exception with a parameter.
+ * Constructs a authz exception with a parameter.
* <p>
- *
* @param msgFormat exception details in message string format
* @param param message string parameter
*/
@@ -61,7 +58,6 @@ public class EAuthzException extends EBaseException {
/**
* Constructs a authz exception with a exception parameter.
* <P>
- *
* @param msgFormat exception details in message string format
* @param param system exception
*/
@@ -72,7 +68,6 @@ public class EAuthzException extends EBaseException {
/**
* Constructs a authz exception with a list of parameters.
* <P>
- *
* @param msgFormat the message format.
* @param params list of message format parameters
*/
@@ -82,7 +77,6 @@ public class EAuthzException extends EBaseException {
/**
* Returns the resource bundle name
- *
* @return resource bundle name
*/
protected String getBundleName() {
diff --git a/pki/base/common/src/com/netscape/certsrv/authorization/EAuthzInternalError.java b/pki/base/common/src/com/netscape/certsrv/authorization/EAuthzInternalError.java
index 2afe2c74..ff7da13d 100644
--- a/pki/base/common/src/com/netscape/certsrv/authorization/EAuthzInternalError.java
+++ b/pki/base/common/src/com/netscape/certsrv/authorization/EAuthzInternalError.java
@@ -29,7 +29,6 @@ public class EAuthzInternalError extends EAuthzException {
/**
* Constructs an authorization internal error exception
- *
* @param errorString error with a detailed message.
*/
public EAuthzInternalError(String errorString) {
diff --git a/pki/base/common/src/com/netscape/certsrv/authorization/EAuthzMgrNotFound.java b/pki/base/common/src/com/netscape/certsrv/authorization/EAuthzMgrNotFound.java
index a920d37a..944b9854 100644
--- a/pki/base/common/src/com/netscape/certsrv/authorization/EAuthzMgrNotFound.java
+++ b/pki/base/common/src/com/netscape/certsrv/authorization/EAuthzMgrNotFound.java
@@ -29,7 +29,6 @@ public class EAuthzMgrNotFound extends EAuthzException {
/**
* Constructs a exception for a missing required authorization manager
- *
* @param errorString Detailed error message.
*/
public EAuthzMgrNotFound(String errorString) {
diff --git a/pki/base/common/src/com/netscape/certsrv/authorization/EAuthzMgrPluginNotFound.java b/pki/base/common/src/com/netscape/certsrv/authorization/EAuthzMgrPluginNotFound.java
index 43ae6edc..b44e4711 100644
--- a/pki/base/common/src/com/netscape/certsrv/authorization/EAuthzMgrPluginNotFound.java
+++ b/pki/base/common/src/com/netscape/certsrv/authorization/EAuthzMgrPluginNotFound.java
@@ -29,7 +29,6 @@ public class EAuthzMgrPluginNotFound extends EAuthzException {
/**
* Constructs a exception for a missing authorization plugin
- *
* @param errorString Detailed error message.
*/
public EAuthzMgrPluginNotFound(String errorString) {
diff --git a/pki/base/common/src/com/netscape/certsrv/authorization/EAuthzUnknownOperation.java b/pki/base/common/src/com/netscape/certsrv/authorization/EAuthzUnknownOperation.java
index 9bbfa0c9..025306cb 100644
--- a/pki/base/common/src/com/netscape/certsrv/authorization/EAuthzUnknownOperation.java
+++ b/pki/base/common/src/com/netscape/certsrv/authorization/EAuthzUnknownOperation.java
@@ -28,9 +28,7 @@ public class EAuthzUnknownOperation extends EAuthzException {
private static final long serialVersionUID = 4344508835702220953L;
/**
- * Constructs a exception for an operation unknown to the authorization
- * manager
- *
+ * Constructs a exception for an operation unknown to the authorization manager
* @param errorString Detailed error message.
*/
public EAuthzUnknownOperation(String errorString) {
diff --git a/pki/base/common/src/com/netscape/certsrv/authorization/EAuthzUnknownProtectedRes.java b/pki/base/common/src/com/netscape/certsrv/authorization/EAuthzUnknownProtectedRes.java
index 0bc5a0ba..4d7695a8 100644
--- a/pki/base/common/src/com/netscape/certsrv/authorization/EAuthzUnknownProtectedRes.java
+++ b/pki/base/common/src/com/netscape/certsrv/authorization/EAuthzUnknownProtectedRes.java
@@ -28,9 +28,7 @@ public class EAuthzUnknownProtectedRes extends EAuthzException {
private static final long serialVersionUID = 444663701711532889L;
/**
- * Constructs a exception for a protected resource unknown to the
- * authorization manager
- *
+ * Constructs a exception for a protected resource unknown to the authorization manager
* @param errorString Detailed error message.
*/
public EAuthzUnknownProtectedRes(String errorString) {
diff --git a/pki/base/common/src/com/netscape/certsrv/authorization/IAuthzManager.java b/pki/base/common/src/com/netscape/certsrv/authorization/IAuthzManager.java
index cc34ea77..167911c4 100644
--- a/pki/base/common/src/com/netscape/certsrv/authorization/IAuthzManager.java
+++ b/pki/base/common/src/com/netscape/certsrv/authorization/IAuthzManager.java
@@ -17,6 +17,7 @@
// --- END COPYRIGHT BLOCK ---
package com.netscape.certsrv.authorization;
+
import java.util.Enumeration;
import java.util.Hashtable;
@@ -27,11 +28,12 @@ import com.netscape.certsrv.base.EBaseException;
import com.netscape.certsrv.base.IConfigStore;
import com.netscape.certsrv.evaluators.IAccessEvaluator;
+
/**
- * Authorization Manager interface needs to be implemented by all authorization
- * managers.
+ * Authorization Manager interface needs to be implemented by all
+ * authorization managers.
* <P>
- *
+ *
* @version $Revision$, $Date$
*/
public interface IAuthzManager {
@@ -39,7 +41,6 @@ public interface IAuthzManager {
/**
* Get the name of this authorization manager instance.
* <p>
- *
* @return String the name of this authorization manager.
*/
public String getName();
@@ -48,34 +49,30 @@ public interface IAuthzManager {
* Get implementation name of authorization manager plugin.
* <p>
* An example of an implementation name will be:
- *
* <PRE>
* com.netscape.cms.BasicAclAuthz
* </PRE>
* <p>
- *
* @return The name of the authorization manager plugin.
- */
+ */
public String getImplName();
/**
- * <code>accessInit</code> is for servlets who want to initialize their own
- * authorization information before full operation. It is supposed to be
- * called from the authzMgrAccessInit() method of the AuthzSubsystem.
+ * <code>accessInit</code> is for servlets who want to initialize their
+ * own authorization information before full operation. It is supposed
+ * to be called from the authzMgrAccessInit() method of the AuthzSubsystem.
* <p>
- * The accessInfo format is determined by each individual authzmgr. For
- * example, for BasicAclAuthz, The accessInfo is the resACLs, whose format
- * should conform to the following:
- *
+ * The accessInfo format is determined by each individual
+ * authzmgr. For example, for BasicAclAuthz,
+ * The accessInfo is the resACLs, whose format should conform
+ * to the following:
* <pre>
* <resource ID>:right-1[,right-n]:[allow,deny](right(s))<evaluatorType>=<value>:<comment for this resource acl
* </pre>
* <P>
- * Example: resTurnKnob:left,right:allow(left) group="lefties":door knobs
- * for lefties
- *
- * @param accessInfo the access info string in the format specified in the
- * authorization manager
+ * Example:
+ * resTurnKnob:left,right:allow(left) group="lefties":door knobs for lefties
+ * @param accessInfo the access info string in the format specified in the authorization manager
* @exception EBaseException error parsing the accessInfo
*/
public void accessInit(String accessInfo) throws EBaseException;
@@ -83,7 +80,6 @@ public interface IAuthzManager {
/**
* Check if the user is authorized to perform the given operation on the
* given resource.
- *
* @param authToken the authToken associated with a user.
* @param resource - the protected resource name
* @param operation - the protected resource operation name
@@ -91,56 +87,54 @@ public interface IAuthzManager {
* @exception EAuthzInternalError if an internal error occurred.
* @exception EAuthzAccessDenied if access denied
*/
- public AuthzToken authorize(IAuthToken authToken, String resource,
- String operation) throws EAuthzInternalError, EAuthzAccessDenied;
+ public AuthzToken authorize(IAuthToken authToken, String resource, String operation)
+ throws EAuthzInternalError, EAuthzAccessDenied;
public AuthzToken authorize(IAuthToken authToken, String expression)
- throws EAuthzInternalError, EAuthzAccessDenied;
+ throws EAuthzInternalError, EAuthzAccessDenied;
/**
* Initialize this authorization manager.
- *
* @param name The name of this authorization manager instance.
* @param implName The name of the authorization manager plugin.
* @param config The configuration store for this authorization manager.
* @exception EBaseException If an initialization error occurred.
*/
public void init(String name, String implName, IConfigStore config)
- throws EBaseException;
+ throws EBaseException;
/**
- * Prepare this authorization manager for a graceful shutdown. Called when
- * the server is exiting for any cleanup needed.
+ * Prepare this authorization manager for a graceful shutdown.
+ * Called when the server is exiting for any cleanup needed.
*/
public void shutdown();
/**
- * Get configuration parameters for this implementation. The configuration
- * parameters returned is passed to the console so configuration for
- * instances of this implementation can be made through the console.
+ * Get configuration parameters for this implementation.
+ * The configuration parameters returned is passed to the
+ * console so configuration for instances of this
+ * implementation can be made through the console.
*
* @return a list of names for configuration parameters.
* @exception EBaseException If an internal error occurred
*/
- public String[] getConfigParams() throws EBaseException;
+ public String[] getConfigParams()
+ throws EBaseException;
/**
* Get the configuration store for this authorization manager.
- *
* @return The configuration store of this authorization manager.
*/
public IConfigStore getConfigStore();
/**
* Get ACL entries
- *
* @return enumeration of ACL entries.
*/
public Enumeration getACLs();
/**
* Get individual ACL entry for the given name of entry.
- *
* @param target The name of the ACL entry
* @return The ACL entry.
*/
@@ -148,26 +142,23 @@ public interface IAuthzManager {
/**
* Update ACLs in the database
- *
* @param id The name of the ACL entry (ie, resource id)
* @param rights The allowable rights for this resource
* @param strACLs The value of the ACL entry
* @param desc The description for this resource
* @exception EACLsException when update fails.
*/
- public void updateACLs(String id, String rights, String strACLs, String desc)
- throws EACLsException;
+ public void updateACLs(String id, String rights, String strACLs,
+ String desc) throws EACLsException;
/**
* Get all registered evaluators.
- *
* @return All registered evaluators.
*/
public Enumeration aclEvaluatorElements();
/**
* Register new evaluator
- *
* @param type Type of evaluator
* @param evaluator Value of evaluator
*/
@@ -175,8 +166,8 @@ public interface IAuthzManager {
/**
* Return a table of evaluators
- *
* @return A table of evaluators
*/
public Hashtable getAccessEvaluators();
}
+
diff --git a/pki/base/common/src/com/netscape/certsrv/authorization/IAuthzSubsystem.java b/pki/base/common/src/com/netscape/certsrv/authorization/IAuthzSubsystem.java
index ea2b8ad8..f6fc3547 100644
--- a/pki/base/common/src/com/netscape/certsrv/authorization/IAuthzSubsystem.java
+++ b/pki/base/common/src/com/netscape/certsrv/authorization/IAuthzSubsystem.java
@@ -27,11 +27,11 @@ import com.netscape.certsrv.base.ISubsystem;
/**
* An interface that represents an authorization component
* <P>
- *
+ *
* @version $Revision$, $Date$
*/
public interface IAuthzSubsystem extends ISubsystem {
-
+
/**
* Constant for auths.
*/
@@ -40,17 +40,17 @@ public interface IAuthzSubsystem extends ISubsystem {
/**
* Constant for class.
*/
- public static final String PROP_CLASS = "class";
+ public static final String PROP_CLASS = "class";
/**
* Constant for impl
*/
- public static final String PROP_IMPL = "impl";
+ public static final String PROP_IMPL = "impl";
/**
* Constant for pluginName.
*/
- public static final String PROP_PLUGIN = "pluginName";
+ public static final String PROP_PLUGIN = "pluginName";
/**
* Constant for instance.
@@ -60,24 +60,22 @@ public interface IAuthzSubsystem extends ISubsystem {
/**
* authorize the user associated with the given authToken for a given
* operation with the given authorization manager name
- *
* @param authzMgrName The authorization manager name
* @param authToken the authenticaton token associated with a user
* @param resource the resource protected by the authorization system
- * @param operation the operation for resource protected by the
- * authorization system
+ * @param operation the operation for resource protected by the authorization system
* @return a authorization token.
* @exception EBaseException If an error occurs during authorization.
*/
public AuthzToken authorize(String authzMgrName, IAuthToken authToken,
- String resource, String operation) throws EBaseException;
+ String resource, String operation)
+ throws EBaseException;
public AuthzToken authorize(String authzMgrName, IAuthToken authToken,
- String exp) throws EBaseException;
+ String exp) throws EBaseException;
/**
* Adds (registers) the given authorization manager.
- *
* @param name The authorization manager name
* @param authzMgr The authorization manager instance.
*/
@@ -85,14 +83,12 @@ public interface IAuthzSubsystem extends ISubsystem {
/**
* Deletes (deregisters) the given authorization manager.
- *
* @param name The authorization manager name to delete.
*/
public void delete(String name);
/**
* Gets the Authorization manager instance of the specified name.
- *
* @param name The authorization manager's name.
* @return an authorization manager interface
*/
@@ -101,7 +97,6 @@ public interface IAuthzSubsystem extends ISubsystem {
/**
* Gets an enumeration of authorization managers registered to the
* authorization component.
- *
* @return a list of authorization managers
*/
public Enumeration getAuthzManagers();
@@ -113,19 +108,16 @@ public interface IAuthzSubsystem extends ISubsystem {
* @param accessInfo string representation of the ACL
* @exception EBaseException if authorization manager is not found
*/
- public void authzMgrAccessInit(String authzMgrName, String accessInfo)
- throws EBaseException;
+ public void authzMgrAccessInit(String authzMgrName, String accessInfo) throws EBaseException;
/**
* Gets an enumeration of authorization manager plugins.
- *
* @return list of authorization manager plugins
*/
public Enumeration getAuthzManagerPlugins();
/**
* Gets a single authorization manager plugin implementation
- *
* @param name given authorization plugin name
* @return authorization manager plugin
*/
@@ -133,7 +125,6 @@ public interface IAuthzSubsystem extends ISubsystem {
/**
* Log error message.
- *
* @param level log level
* @param msg error message
*/
@@ -141,23 +132,21 @@ public interface IAuthzSubsystem extends ISubsystem {
/**
* Get a hashtable containing all authentication plugins.
- *
* @return all authentication plugins.
*/
public Hashtable getPlugins();
/**
* Get a hashtable containing all authentication instances.
- *
* @return all authentication instances.
*/
public Hashtable getInstances();
/**
* Get an authorization manager interface for the given name.
- *
* @param name given authorization manager name.
* @return an authorization manager interface
*/
public IAuthzManager get(String name);
}
+