Interface PolicyExecutor
-
- All Known Implementing Classes:
JavaxElPolicyExecutor
public interface PolicyExecutor
Custom executor of policy statements.
-
-
Method Summary
All Methods Instance Methods Abstract Methods Default Methods Modifier and Type Method Description void
executePolicy(String policyStatement, Errors.Collector collector, ProviderRequest request)
Execute a policy based on a policy statement.default boolean
supports(String policyStatement, ProviderRequest request)
Can be used to tell thePolicyValidator
that this statement is supported by this policy executor.
-
-
-
Method Detail
-
supports
default boolean supports(String policyStatement, ProviderRequest request)
Can be used to tell thePolicyValidator
that this statement is supported by this policy executor. If there are more than one executors configured, first provider that supports a statement will execute it.- Parameters:
policyStatement
- statement as configured throughEndpointConfig
request
- request of current security exchange, containing environment, subject, and object- Returns:
- true if this executor supports the statement, false otherwise
-
executePolicy
void executePolicy(String policyStatement, Errors.Collector collector, ProviderRequest request)
Execute a policy based on a policy statement.- Parameters:
policyStatement
- statement to evaluatecollector
- registerErrors.Collector.fatal(Object, String)
in case the policy statement denies the request, do nothing for successful execution.Errors.Collector.warn(Object, String)
andErrors.Collector.hint(Object, String)
may be used for troubleshooting/debugging purposesrequest
- request providing access to subject, service subject, environment and object (s)
-
-