gov.lanl.RAD
Class AccessDecisionImpl

java.lang.Object
  |
  +--org.omg.PortableServer.Servant
        |
        +--org.omg.DfResourceAccessDecision.AccessDecisionPOA
              |
              +--gov.lanl.RAD.AccessDecisionImpl

All Implemented Interfaces:

org.omg.DfResourceAccessDecision.AccessDecisionOperations, org.omg.CORBA.portable.InvokeHandler

public class AccessDecisionImpl

extends org.omg.DfResourceAccessDecision.AccessDecisionPOA

Implements the AccessDecision interface

Version:

$Id: AccessDecisionImpl.java,v 1.25 2002/06/23 00:19:09 dwforslund Exp $

Author:

Srikanth Kotha $Author: dwforslund $

Constructor Summary

AccessDecisionImpl(org.omg.CORBA.ORB theOrb, java.lang.String serverName, java.util.Properties props)
Creates new PolicyEvaluator and DynamicAttributeService objects and keeps their references

AccessDecisionImpl(java.util.Properties inServerProps)
Constructor used by gov.lanl.SSLTools.OMSession to start a rad with SSLTools support for the various security levels, including NONE

Method Summary

boolean	access_allowed(org.omg.DfResourceAccessDecision.ResourceName resource_name, java.lang.String Operation, org.omg.Security.SecAttribute[] attribute_list)
void	init() Initialize the various CORBA objects
static void	main(java.lang.String[] argv) Creates an AccessDecision object and then waits forever for operation requests which are invoked on the object
boolean[]	multiple_access_allowed(org.omg.DfResourceAccessDecision.AccessDefinition[] access_def, org.omg.Security.SecAttribute[] attribute_list)
static void	setNameService(gov.lanl.Utility.NameService nameService) set the NameService object

Methods inherited from class org.omg.DfResourceAccessDecision.AccessDecisionPOA

_all_interfaces, _invoke, _this, _this

Methods inherited from class org.omg.PortableServer.Servant

_default_POA, _get_delegate, _get_interface_def, _is_a, _non_existent, _object_id, _orb, _poa, _set_delegate, _this_object, _this_object

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AccessDecisionImpl

public AccessDecisionImpl(java.util.Properties inServerProps)

Constructor used by gov.lanl.SSLTools.OMSession to start a rad with SSLTools support for the various security levels, including NONE

Parameters:

inServerProps - is the properties file read by OMSession, needs a reference for the config file for rad (RADCONFIGFILE)

AccessDecisionImpl

public AccessDecisionImpl(org.omg.CORBA.ORB theOrb,
                          java.lang.String serverName,
                          java.util.Properties props)

Creates new PolicyEvaluator and DynamicAttributeService objects and keeps their references

Method Detail

init

public void init()

Initialize the various CORBA objects

See Also:

setNameService

public static void setNameService(gov.lanl.Utility.NameService nameService)

set the NameService object

Parameters:

nameService - object to be set

multiple_access_allowed

public boolean[] multiple_access_allowed(org.omg.DfResourceAccessDecision.AccessDefinition[] access_def,
                                         org.omg.Security.SecAttribute[] attribute_list)

Parameters:

access_def - is a set of resource-operation pairs

attribute_list - is the list of attributes corresponding to the user

Returns:

a boolean array whose individual elements contain decisions corresponding to the respective resource-operation pair

access_allowed

public boolean access_allowed(org.omg.DfResourceAccessDecision.ResourceName resource_name,
                              java.lang.String Operation,
                              org.omg.Security.SecAttribute[] attribute_list)

Parameters:

resource_name - is the name of the resource that is being requested

Operation - defines whether the resource is requested for READ/ADD/EDIT

attribute_list - contains the users attributes based on which the access decision is made

Returns:

a boolean which indicates whether access is allowed or denied

main

public static void main(java.lang.String[] argv)

Creates an AccessDecision object and then waits forever for operation requests which are invoked on the object