com.michelin.cio.hudson.plugins.rolestrategy

Class RoleBasedAuthorizationStrategy

java.lang.Object

hudson.model.AbstractDescribableImpl<hudson.security.AuthorizationStrategy>

hudson.security.AuthorizationStrategy

com.michelin.cio.hudson.plugins.rolestrategy.RoleBasedAuthorizationStrategy

All Implemented Interfaces:

hudson.ExtensionPoint, hudson.model.Describable<hudson.security.AuthorizationStrategy>

public class RoleBasedAuthorizationStrategy
extends hudson.security.AuthorizationStrategy

Role-based authorization strategy.

Author:

Thomas Maurel

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	RoleBasedAuthorizationStrategy.ConverterImpl Converter used to persist and retrieve the strategy from disk.
static class	RoleBasedAuthorizationStrategy.DescriptorImpl Descriptor used to bind the strategy to the Web forms.

Nested classes/interfaces inherited from class hudson.security.AuthorizationStrategy

hudson.security.AuthorizationStrategy.Unsecured

Nested classes/interfaces inherited from interface hudson.ExtensionPoint

hudson.ExtensionPoint.LegacyInstancesAreScopedToHudson

Field Summary

Fields

Modifier and Type	Field and Description
static RoleBasedAuthorizationStrategy.DescriptorImpl	DESCRIPTOR
static String	GLOBAL
static String	MACRO_ROLE
static String	MACRO_USER
static String	PROJECT
static String	SLAVE

Fields inherited from class hudson.security.AuthorizationStrategy

LIST, UNSECURED

Constructor Summary

Constructors

Constructor and Description
RoleBasedAuthorizationStrategy()

Method Summary

Methods

Modifier and Type	Method and Description
hudson.security.ACL	getACL(hudson.model.AbstractItem project)
hudson.security.ACL	getACL(hudson.model.Computer computer)
hudson.security.ACL	getACL(hudson.model.Job<?,?> project) Get the specific ACL for projects.
SortedMap<Role,Set<String>>	getGrantedRoles(String type) Get the roles from the global RoleMap.
Collection<String>	getGroups() Used by the container realm.
hudson.security.SidACL	getRootACL() Get the root ACL.
Set<String>	getSIDs(String type) Get all the SIDs referenced by specified RoleMap type.
static boolean	isCreateAllowed() Control job create using RoleBasedProjectNamingStrategy.

Methods inherited from class hudson.security.AuthorizationStrategy

all, getACL, getACL, getACL, getACL, getACL

Methods inherited from class hudson.model.AbstractDescribableImpl

getDescriptor

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

GLOBAL

public static final String GLOBAL

See Also:

Constant Field Values

PROJECT

public static final String PROJECT

See Also:

Constant Field Values

SLAVE

public static final String SLAVE

See Also:

Constant Field Values

MACRO_ROLE

public static final String MACRO_ROLE

See Also:

Constant Field Values

MACRO_USER

public static final String MACRO_USER

See Also:

Constant Field Values

DESCRIPTOR

@Extension
public static final RoleBasedAuthorizationStrategy.DescriptorImpl DESCRIPTOR

Constructor Detail

RoleBasedAuthorizationStrategy

public RoleBasedAuthorizationStrategy()

Method Detail

getRootACL

public hudson.security.SidACL getRootACL()

Get the root ACL.

Specified by:

getRootACL in class hudson.security.AuthorizationStrategy

Returns:

The global ACL

getACL

public hudson.security.ACL getACL(hudson.model.Job<?,?> project)

Get the specific ACL for projects.

Overrides:

getACL in class hudson.security.AuthorizationStrategy

Parameters:

project - The access-controlled project

Returns:

The project specific ACL

getACL

public hudson.security.ACL getACL(hudson.model.AbstractItem project)

Overrides:

getACL in class hudson.security.AuthorizationStrategy

getACL

public hudson.security.ACL getACL(hudson.model.Computer computer)

Overrides:

getACL in class hudson.security.AuthorizationStrategy

getGroups

public Collection<String> getGroups()

Used by the container realm.

Specified by:

getGroups in class hudson.security.AuthorizationStrategy

Returns:

All the sids referenced by the strategy

getGrantedRoles

public SortedMap<Role,Set<String>> getGrantedRoles(String type)

Get the roles from the global RoleMap.

The returned sorted map is unmodifiable.

Parameters:

type - The object type controlled by the RoleMap

Returns:

All roles from the global RoleMap

getSIDs

public Set<String> getSIDs(String type)

Get all the SIDs referenced by specified RoleMap type.

Parameters:

type - The object type controlled by the RoleMap

Returns:

All SIDs from the specified RoleMap.

isCreateAllowed

public static boolean isCreateAllowed()

Control job create using RoleBasedProjectNamingStrategy.

Since:

2.2.0