kaos.policy.guard
Class KAoSGuardPolicyProcessor

java.lang.Object
  kaos.policy.guard.KAoSGuardPolicyProcessor

public class KAoSGuardPolicyProcessor
extends java.lang.Object

Field Summary

java.lang.String	_authModality
static int	_FULL_MATCH_
static int	_NO_MATCH_
static int	_PARTIAL_MATCH_

Constructor Summary

KAoSGuardPolicyProcessor()

Method Summary

void	checkDeepPermission(KAoSGuardImpl guard, ActionInstanceDescription aid, PolicyDecisionObserver pObserver)
void	checkPermission(KAoSGuardImpl guard, ActionInstanceDescription origActionDesc, PolicyDecisionObserver pObserver)
java.util.List<ActionInstanceDescription>	findPolicyDecision(KAoSGuardImpl guard, ActionInstanceDescription aid, PolicyDecisionObserver pObserver)
java.util.Vector	getAllowableValuesForActionProperties(ActionInstanceDescription origActionDesc, PolicyDecisionObserver observer)
java.util.Vector<ActionInstanceDescription>	getAllowableValuesForActionProperties(KAoSGuardImpl guard, java.util.Vector<java.lang.String> origPropertyNames, ActionInstanceDescription origActionDesc, boolean tight, PolicyDecisionObserver observer)
java.util.Set	getAllowableValuesForActionProperty(KAoSGuardImpl guard, java.lang.String origPropertyName, ActionInstanceDescription origActionDesc, java.util.Set allTargetValues, boolean tight, PolicyDecisionObserver observer)
protected java.lang.String	getDecidingAuthorizationPolicy(KAoSGuardImpl guard, ActionInstanceDescription matchedAID)
java.util.Vector<OntInstanceDescription>	getForbiddenValuesForActionProperty(KAoSGuardImpl guard, java.lang.String origPropertyName, ActionInstanceDescription origActionDesc, PolicyDecisionObserver observer)
java.util.List<ActionInstanceDescription>	getObligationsForTriggerCondition(KAoSGuardImpl guard, ActionInstanceDescription origActionDesc, PolicyDecisionObserver observer)
protected boolean	isActionAuthorized(KAoSGuardImpl guard, ActionInstanceDescription actionDesc)
protected boolean	matchCondition(KAoSGuardImpl guard, ActionInstanceDescription checkedActionInst, SerializableOntDescription myConditionDescription, KAoSRoleValueMapContainer rvm, java.util.Map<java.lang.String,java.util.List<ActionInstanceDescription>> conditionIdToMatchingAIDs)
protected boolean	matchInterHistoryRVMs(java.util.Map<java.lang.String,java.util.List<ActionInstanceDescription>> historyIdToMatchingAIDs, KAoSRoleValueMapContainer policyRVM)
protected boolean	matchPolicyConditions(KAoSGuardImpl guard, ActionInstanceDescription checkedActionInst, PolicyInformation ps)
protected java.util.List<ActionInstanceDescription>	matchPolicyHistory(KAoSGuardImpl guard, HistoryActionDescription historyDescription, ActionInstanceDescription currentAction, KAoSRoleValueMapContainer policyRVM)
protected java.util.Vector<ActionInstanceDescription>	matchPolicyState(KAoSGuardImpl guard, ActionInfo stateDescription, ActionInstanceDescription currentAction, KAoSRoleValueMapContainer policyRVM)
boolean	matchPolicyWithAction(KAoSGuardImpl guard, ActionInstanceDescription matchedAID, PolicyInformation matchedPolicy)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

_authModality

public java.lang.String _authModality

_PARTIAL_MATCH_

public static final int _PARTIAL_MATCH_

See Also:

Constant Field Values

_NO_MATCH_

public static final int _NO_MATCH_

See Also:

Constant Field Values

_FULL_MATCH_

public static final int _FULL_MATCH_

See Also:

Constant Field Values

Constructor Detail

KAoSGuardPolicyProcessor

public KAoSGuardPolicyProcessor()

Method Detail

checkPermission

public void checkPermission(KAoSGuardImpl guard,
                            ActionInstanceDescription origActionDesc,
                            PolicyDecisionObserver pObserver)
                     throws KAoSSecurityException

Throws:

KAoSSecurityException

checkDeepPermission

public void checkDeepPermission(KAoSGuardImpl guard,
                                ActionInstanceDescription aid,
                                PolicyDecisionObserver pObserver)
                         throws ServiceFailure,
                                KAoSSecurityException

Throws:

ServiceFailure

KAoSSecurityException

getDecidingAuthorizationPolicy

protected java.lang.String getDecidingAuthorizationPolicy(KAoSGuardImpl guard,
                                                          ActionInstanceDescription matchedAID)

getObligationsForTriggerCondition

public java.util.List<ActionInstanceDescription> getObligationsForTriggerCondition(KAoSGuardImpl guard,
                                                                                   ActionInstanceDescription origActionDesc,
                                                                                   PolicyDecisionObserver observer)
                                                                            throws ObligationViolationException

Throws:

ObligationViolationException

isActionAuthorized

protected boolean isActionAuthorized(KAoSGuardImpl guard,
                                     ActionInstanceDescription actionDesc)

findPolicyDecision

public java.util.List<ActionInstanceDescription> findPolicyDecision(KAoSGuardImpl guard,
                                                                    ActionInstanceDescription aid,
                                                                    PolicyDecisionObserver pObserver)
                                                             throws ObligationViolationException,
                                                                    KAoSSecurityException,
                                                                    ServiceFailure

Throws:

ObligationViolationException

KAoSSecurityException

ServiceFailure

getAllowableValuesForActionProperties

public java.util.Vector getAllowableValuesForActionProperties(ActionInstanceDescription origActionDesc,
                                                              PolicyDecisionObserver observer)

getForbiddenValuesForActionProperty

public java.util.Vector<OntInstanceDescription> getForbiddenValuesForActionProperty(KAoSGuardImpl guard,
                                                                                    java.lang.String origPropertyName,
                                                                                    ActionInstanceDescription origActionDesc,
                                                                                    PolicyDecisionObserver observer)

getAllowableValuesForActionProperties

public java.util.Vector<ActionInstanceDescription> getAllowableValuesForActionProperties(KAoSGuardImpl guard,
                                                                                         java.util.Vector<java.lang.String> origPropertyNames,
                                                                                         ActionInstanceDescription origActionDesc,
                                                                                         boolean tight,
                                                                                         PolicyDecisionObserver observer)

getAllowableValuesForActionProperty

public java.util.Set getAllowableValuesForActionProperty(KAoSGuardImpl guard,
                                                         java.lang.String origPropertyName,
                                                         ActionInstanceDescription origActionDesc,
                                                         java.util.Set allTargetValues,
                                                         boolean tight,
                                                         PolicyDecisionObserver observer)

matchPolicyWithAction

public boolean matchPolicyWithAction(KAoSGuardImpl guard,
                                     ActionInstanceDescription matchedAID,
                                     PolicyInformation matchedPolicy)

matchPolicyConditions

protected boolean matchPolicyConditions(KAoSGuardImpl guard,
                                        ActionInstanceDescription checkedActionInst,
                                        PolicyInformation ps)

matchCondition

protected boolean matchCondition(KAoSGuardImpl guard,
                                 ActionInstanceDescription checkedActionInst,
                                 SerializableOntDescription myConditionDescription,
                                 KAoSRoleValueMapContainer rvm,
                                 java.util.Map<java.lang.String,java.util.List<ActionInstanceDescription>> conditionIdToMatchingAIDs)

matchInterHistoryRVMs

protected boolean matchInterHistoryRVMs(java.util.Map<java.lang.String,java.util.List<ActionInstanceDescription>> historyIdToMatchingAIDs,
                                        KAoSRoleValueMapContainer policyRVM)

Parameters:

historyIdToMatchingAIDs -

policyRVM -

Returns:

matchPolicyHistory

protected java.util.List<ActionInstanceDescription> matchPolicyHistory(KAoSGuardImpl guard,
                                                                       HistoryActionDescription historyDescription,
                                                                       ActionInstanceDescription currentAction,
                                                                       KAoSRoleValueMapContainer policyRVM)

matchPolicyState

protected java.util.Vector<ActionInstanceDescription> matchPolicyState(KAoSGuardImpl guard,
                                                                       ActionInfo stateDescription,
                                                                       ActionInstanceDescription currentAction,
                                                                       KAoSRoleValueMapContainer policyRVM)