| Classes in this File | Line Coverage | Branch Coverage | Complexity | ||||
| SecurityAttribute |
|
| 1.0;1 |
| 1 | /* | |
| 2 | * Copyright 2007-2009 The Kuali Foundation | |
| 3 | * | |
| 4 | * Licensed under the Educational Community License, Version 2.0 (the "License"); | |
| 5 | * you may not use this file except in compliance with the License. | |
| 6 | * You may obtain a copy of the License at | |
| 7 | * | |
| 8 | * http://www.opensource.org/licenses/ecl2.php | |
| 9 | * | |
| 10 | * Unless required by applicable law or agreed to in writing, software | |
| 11 | * distributed under the License is distributed on an "AS IS" BASIS, | |
| 12 | * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. | |
| 13 | * See the License for the specific language governing permissions and | |
| 14 | * limitations under the License. | |
| 15 | */ | |
| 16 | package org.kuali.rice.kew.doctype; | |
| 17 | ||
| 18 | import java.io.Serializable; | |
| 19 | ||
| 20 | import org.kuali.rice.kim.bo.Person; | |
| 21 | ||
| 22 | ||
| 23 | /** | |
| 24 | * This is an attribute used to implement custom document security for document search and the route log. | |
| 25 | * SecurityAttributes are configured to be associated with the document type against which they should | |
| 26 | * be applied. For each route log or row that is returned from a document search, this authorization | |
| 27 | * methods will be executed. | |
| 28 | * | |
| 29 | * @author Kuali Rice Team (rice.collab@kuali.org) | |
| 30 | * | |
| 31 | */ | |
| 32 | public interface SecurityAttribute extends Serializable { | |
| 33 | ||
| 34 | /** | |
| 35 | * Determines whether or not a Person is authorized to see a given row in document search results. | |
| 36 | * The row being checked corresponds to the documentId given. | |
| 37 | * | |
| 38 | * @param currentUser the Person who is executing the search | |
| 39 | * @param docTypeName the name of the Document Type of the Document being checked for authorization | |
| 40 | * @param documentId the ID of the Document to check authorization for | |
| 41 | * @param initiatorPrincipalId the principal ID of the initiator of the document | |
| 42 | * | |
| 43 | * @return true if the Person is authorized to view the row in document search, false otherwise | |
| 44 | */ | |
| 45 | public Boolean docSearchAuthorized(Person currentUser, String docTypeName, Long documentId, String initiatorPrincipalId); | |
| 46 | ||
| 47 | /** | |
| 48 | * Determines whether or not a Person is authorized to open the route log for the document with the given ID. | |
| 49 | * | |
| 50 | * @param currentUser the Person who is attempting to view the route log | |
| 51 | * @param docTypeName the name of the Document Type of the Document being checked for authorization | |
| 52 | * @param documentId the ID of the Document that the user is trying to view the route log for | |
| 53 | * @param initiatorPrincipalId the principal ID of the initiator of the document | |
| 54 | * | |
| 55 | * @return true if the Person is authorized to view the route log, false otherwise | |
| 56 | */ | |
| 57 | public Boolean routeLogAuthorized(Person currentUser, String docTypeName, Long documentId, String initiatorPrincipalId); | |
| 58 | ||
| 59 | } |