org.riotfamily.riot.security.policy
Interface AssertionPolicy

All Superinterfaces:

AuthorizationPolicy, Ordered

All Known Implementing Classes:

ReflectionPolicy, SystemPagePolicy

public interface AssertionPolicy
extends AuthorizationPolicy

Nested Class Summary

Nested classes/interfaces inherited from interface org.riotfamily.riot.security.policy.AuthorizationPolicy

AuthorizationPolicy.Permission

Field Summary

Fields inherited from interface org.springframework.core.Ordered

HIGHEST_PRECEDENCE, LOWEST_PRECEDENCE

Method Summary

void	assertIsGranted(RiotUser user, String action, Object object) By contract this method is invoked whenever an action is about to be executed.

Methods inherited from interface org.riotfamily.riot.security.policy.AuthorizationPolicy

getPermission

Methods inherited from interface org.springframework.core.Ordered

getOrder

Method Detail

assertIsGranted

void assertIsGranted(RiotUser user,
                     String action,
                     Object object)
                     throws PermissionDeniedException

By contract this method is invoked whenever an action is about to be executed. Implementors can use this hook to veto a previously granted permission.

Parameters:

subject - The user

action - The action to be performed

object - The object on which the action is to be performed

Throws:

PermissionDeniedException - if the permission is not granted