org.kuali.ole.sec.document

Class SecurityModelMaintainableImpl

java.lang.Object

org.kuali.rice.krad.uif.service.impl.ViewHelperServiceImpl

org.kuali.rice.krad.maintenance.MaintainableImpl

org.kuali.rice.kns.maintenance.KualiMaintainableImpl

org.kuali.ole.sys.document.FinancialSystemMaintainable

org.kuali.ole.sec.document.AbstractSecurityModuleMaintainable

org.kuali.ole.sec.document.SecurityModelMaintainableImpl

All Implemented Interfaces:

Serializable, org.kuali.rice.krad.lookup.SelectiveReferenceRefresher, org.kuali.rice.krad.maintenance.Maintainable, org.kuali.rice.krad.uif.service.ViewHelperService

public class SecurityModelMaintainableImpl
extends AbstractSecurityModuleMaintainable

Maintainable implementation for the Security Model maintenance document. Hooks into Post processing to create a KIM role from Model and assigns users/permissions to role based on Model

See Also:

Serialized Form

Field Summary

Fields inherited from class org.kuali.rice.kns.maintenance.KualiMaintainableImpl

businessObject, businessObjectAuthorizationService, businessObjectDictionaryService, businessObjectMetaDataService, documentHelperService, inactiveRecordDisplay, maintenanceDocumentDictionaryService, newCollectionLineNames, newCollectionLines, personService

Constructor Summary

Constructors

Constructor and Description
SecurityModelMaintainableImpl()

Method Summary

Methods

Modifier and Type	Method and Description
protected void	assignOrUpdateModelMembers(org.kuali.rice.kim.api.role.Role modelRole, SecurityModel securityModel) Iterates through the model member list and assign members to the model role or updates the membership
protected void	assignOrUpdateModelMembershipToDefinitionRoles(org.kuali.rice.kim.api.role.Role modelRole, SecurityModel oldSecurityModel, SecurityModel newSecurityModel, boolean newMaintenanceAction) Iterates through the model definition list and assigns the model role to the definition role if necessary or updates the current member assignment
protected org.kuali.rice.kim.api.role.Role	createOrUpdateModelRole(SecurityModel newSecurityModel) Creates a new role for the model (if the model is new), otherwise updates the role
protected void	createPrincipalSecurityRecords(String memberId, String memberTypeCode) Creates security principal records for model members (if necessary) so that they will appear on security principal lookup for editing
void	doRouteStatusChange(org.kuali.rice.krad.bo.DocumentHeader documentHeader)
protected void	inactivateModelRole(org.kuali.rice.kim.api.role.Role modelRole) Saves the given security model setting the active indicator to false
protected boolean	isDefinitionInModel(String definitionName, SecurityModel securityModel) Determines whether the given definition is part of the SecurityModel associated definitions
void	processAfterCopy(org.kuali.rice.kns.document.MaintenanceDocument document, Map<String,String[]> parameters) Override to clear out KIM role id on copy

Methods inherited from class org.kuali.ole.sec.document.AbstractSecurityModuleMaintainable

doMembershipQualificationsMatchValues, doQualificationsMatch, getDefaultRoleTypeId, getRoleMembershipForMemberType, getRoleQualifiersFromSecurityModelDefinition, refresh, updateSecurityModelRoleMember

Methods inherited from class org.kuali.ole.sys.document.FinancialSystemMaintainable

answerSplitNodeQuestion, populateChartOfAccountsCodeFields, processAfterPost, processBeforeAddLine, refreshReferences, saveBusinessObject

Methods inherited from class org.kuali.rice.kns.maintenance.KualiMaintainableImpl

addMultipleValueLookupResults, addNewLineToCollection, clearBusinessObjectOfRestrictedValues, clearCollectionRestrictedValues, clearFieldRestrictedValues, decryptEncryptedData, deleteBusinessObject, generateAllAffectedReferences, getAffectedReferencesFromLookup, getAllRefreshableReferences, getBoClass, getBusinessObject, getBusinessObjectAuthorizationService, getBusinessObjectDictionaryService, getBusinessObjectMetaDataService, getCoreSections, getDocumentHelperService, getDocumentTitle, getDuplicateIdentifierFieldsFromDataDictionary, getInactiveRecordDisplay, getMaintainableTitle, getMaintenanceDocumentDictionaryService, getMultiValueIdentifierList, getNewCollectionLine, getPersonService, getSections, getShowInactiveRecords, hasBusinessObjectExisted, initNewCollectionLine, isBoNotesEnabled, isExternalBusinessObject, isNotesEnabled, isOldBusinessObjectInDocument, isRelationshipRefreshable, performCollectionForceUpperCase, performFieldForceUpperCase, performFieldForceUpperCase, performForceUpperCase, populateBusinessObject, populateNewCollectionLines, populateNewSubCollectionLines, prepareBusinessObject, prepareBusinessObjectForAdditionFromMultipleValueLookup, processAfterAddLine, processAfterEdit, processAfterNew, saveDataObject, setBoClass, setBusinessObject, setBusinessObjectAuthorizationService, setBusinessObjectDictionaryService, setBusinessObjectMetaDataService, setDataObject, setDocumentHelperService, setGenerateBlankRequiredValues, setGenerateDefaultValues, setMaintenanceDocumentDictionaryService, setNewCollectionLineDefaultValues, setPersonService, setShowInactiveRecords, setupNewFromExisting, shouldFieldBeEncrypted

Methods inherited from class org.kuali.rice.krad.maintenance.MaintainableImpl

deleteDataObject, generateMaintenanceLocks, getCustomLockDescriptor, getDataObject, getDataObjectAuthorizationService, getDataObjectClass, getDataObjectMetaDataService, getDocumentDictionaryService, getDocumentNumber, getDocumentTitle, getDocumentTypeName, getEncryptionService, getLockingDocumentId, getLookupService, getMaintenanceAction, getMaintenanceDocumentService, getPersistableBusinessObject, getWorkflowEngineDocumentIdsToLock, isLockable, isOldDataObjectInDocument, prepareExternalBusinessObject, prepareForSave, processAfterAddLine, processAfterCopy, processAfterDeleteLine, processAfterEdit, processAfterNew, processAfterPost, processAfterRetrieve, retrieveObjectForEditOrCopy, setDataObjectAuthorizationService, setDataObjectClass, setDataObjectMetaDataService, setDocumentDictionaryService, setDocumentNumber, setEncryptionService, setLookupService, setMaintenanceAction, setMaintenanceDocumentService, setupNewFromExisting, useCustomLockDescriptors

Methods inherited from class org.kuali.rice.krad.uif.service.impl.ViewHelperServiceImpl

addCustomContainerComponents, addLine, adjustIdIfNecessary, applyAuthorizationAndPresentationLogic, applyDefaultValues, applyDefaultValuesForCollectionLine, buildClientSideStateScript, buildExportTableData, buildExportTableRow, buildGrowlScript, buildInquiryLink, cleanViewAfterRender, findNestedDictionaryAttribute, getBusinessObjectService, getCommonContext, getConfigurationService, getDataDictionaryService, getExportTableFormatOptions, getExpressionEvaluator, getPersistenceService, getPersistenceStructureService, getPreModelContext, getViewDictionaryService, initializeDataFieldFromDataDictionary, invokeMethodFinalizer, logAndThrowRuntime, performAddLineValidation, performApplyModel, performComponentApplyModel, performComponentFinalize, performComponentInitialization, performComponentLifecycle, performCustomApplyModel, performCustomFinalize, performCustomInitialization, performDeleteLineValidation, performFinalize, performInitialization, populateDefaultValueForField, populateViewFromRequestParameters, processAfterSaveLine, processAnyRemoteFieldsHolder, processBeforeAddLine, processBeforeSaveLine, processCollectionAddBlankLine, processCollectionAddLine, processCollectionDeleteLine, processCollectionSaveLine, processMultipleValueLookupResults, refreshReferences, retrieveEditModesAndActionFlags, runComponentModifiers, setBusinessObjectService, setConfigurationService, setDataDictionaryService, setExpressionEvaluator, setPersistenceService, setPersistenceStructureService, setViewContext, setViewDictionaryService, spawnSubLifecyle, syncClientSideStateForComponent

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.kuali.rice.krad.maintenance.Maintainable

deleteDataObject, generateMaintenanceLocks, getCustomLockDescriptor, getDataObject, getDataObjectClass, getDocumentTitle, getLockingDocumentId, getMaintenanceAction, getPersistableBusinessObject, getWorkflowEngineDocumentIdsToLock, isLockable, isOldDataObjectInDocument, prepareExternalBusinessObject, prepareForSave, processAfterCopy, processAfterEdit, processAfterNew, processAfterPost, processAfterRetrieve, retrieveObjectForEditOrCopy, setDataObjectClass, setDocumentNumber, setMaintenanceAction, setupNewFromExisting, useCustomLockDescriptors

Methods inherited from interface org.kuali.rice.krad.uif.service.ViewHelperService

applyDefaultValuesForCollectionLine, buildExportTableData, buildInquiryLink, cleanViewAfterRender, getCommonContext, getExpressionEvaluator, performApplyModel, performComponentInitialization, performComponentLifecycle, performFinalize, performInitialization, populateViewFromRequestParameters, processCollectionAddBlankLine, processCollectionAddLine, processCollectionDeleteLine, processCollectionSaveLine, processMultipleValueLookupResults, refreshReferences, spawnSubLifecyle

Constructor Detail

SecurityModelMaintainableImpl

public SecurityModelMaintainableImpl()

Method Detail

doRouteStatusChange

public void doRouteStatusChange(org.kuali.rice.krad.bo.DocumentHeader documentHeader)

Specified by:

doRouteStatusChange in interface org.kuali.rice.krad.maintenance.Maintainable

Overrides:

doRouteStatusChange in class org.kuali.rice.krad.maintenance.MaintainableImpl

See Also:

MaintainableImpl.doRouteStatusChange(org.kuali.rice.krad.bo.DocumentHeader)

createOrUpdateModelRole

protected org.kuali.rice.kim.api.role.Role createOrUpdateModelRole(SecurityModel newSecurityModel)

Creates a new role for the model (if the model is new), otherwise updates the role

Parameters:

oldSecurityModel - SecurityModel record before updates

newSecurityModel - SecurityModel after updates

inactivateModelRole

protected void inactivateModelRole(org.kuali.rice.kim.api.role.Role modelRole)

Saves the given security model setting the active indicator to false

Parameters:

newSecurityModel - SecurityModel to inactivate

assignOrUpdateModelMembershipToDefinitionRoles

protected void assignOrUpdateModelMembershipToDefinitionRoles(org.kuali.rice.kim.api.role.Role modelRole,
                                                  SecurityModel oldSecurityModel,
                                                  SecurityModel newSecurityModel,
                                                  boolean newMaintenanceAction)

Iterates through the model definition list and assigns the model role to the definition role if necessary or updates the current member assignment

Parameters:

oldSecurityModel - SecurityModel record before updates

newSecurityModel - SecurityModel whose membership should be updated

newMaintenanceAction - boolean indicating whether this is a new record (old side will not contain data)

assignOrUpdateModelMembers

protected void assignOrUpdateModelMembers(org.kuali.rice.kim.api.role.Role modelRole,
                              SecurityModel securityModel)

Iterates through the model member list and assign members to the model role or updates the membership

Parameters:

securityModel - SecurityModel whose member list should be updated

createPrincipalSecurityRecords

protected void createPrincipalSecurityRecords(String memberId,
                                  String memberTypeCode)

Creates security principal records for model members (if necessary) so that they will appear on security principal lookup for editing

Parameters:

memberId - String member id of model role

memberTypeCode - String member type code for member

isDefinitionInModel

protected boolean isDefinitionInModel(String definitionName,
                          SecurityModel securityModel)

Determines whether the given definition is part of the SecurityModel associated definitions

Parameters:

definitionName - name of definition to look for

securityModel - SecurityModel to check

Returns:

boolean true if the definition is in the security model, false if not

processAfterCopy

public void processAfterCopy(org.kuali.rice.kns.document.MaintenanceDocument document,
                    Map<String,String[]> parameters)

Override to clear out KIM role id on copy

Overrides:

processAfterCopy in class org.kuali.rice.kns.maintenance.KualiMaintainableImpl

See Also:

KualiMaintainableImpl.processAfterCopy(org.kuali.rice.kns.document.MaintenanceDocument, java.util.Map)