rolehierarchypolicy.java

一个完整的XACML工程,学习XACML技术的好例子!

/*
* Copyright (c) 2000-2005, University of Salford
* All rights reserved.
*
* Redistribution and use in source and binary forms, with or without 
* modification, are permitted provided that the following conditions are met:
*
* Redistributions of source code must retain the above copyright notice, this 
* list of conditions and the following disclaimer.
* 
* Redistributions in binary form must reproduce the above copyright notice, 
* this list of conditions and the following disclaimer in the documentation 
* and/or other materials provided with the distribution. 
*
* Neither the name of the University of Salford nor the names of its 
* contributors may be used to endorse or promote products derived from this 
* software without specific prior written permission. 
*
* THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" 
* AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 
* ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE 
* LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR 
* CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 
* SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS 
* INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN 
* CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE 
* POSSIBILITY OF SUCH DAMAGE.
*/

package issrg.pba.rbac;

/**
 * This interface provides the methods for enquiring the Role Hierarchy Policy. 
 * The
 * users of the policy will normally only need to know how to convert the role 
 * OID into
 * the type as it is specified in the policy (the authorisation tokens may 
 * contain an
 * OID as the identifier of the role type, which is not human readable in the 
 * policy, and
 * would probably be replaced by a human-readable string). The other thing the 
 * users may
 * wish to know is the reference to the node representing the given role value 
 * of a particular
 * type. The node can tell the hierarchical relationship to other nodes.
 *
 * @author A.Otenko
 */

public interface RoleHierarchyPolicy {

  /**
   * This method returns the type of the attribute corresponding to the given 
   * OID.
   * If the policy does not have the requested OID, the method should return 
   * null.
   *
   * @param roleOID is the requested OID in the dotted form
   *
   * @return the human-readable string used in the policy, and that should be 
   *   used
   *   when getting a role hierarchy node
   */
  public String getTypeByOID(String roleOID);
  
  
  /**
   * This method returns a hashtable that map between type and corresponding OID
   *
   * @return a hashtable that map between type and corresponding OID
   */
  public java.util.Map getTypeOid();

  /**
   * This method returns a reference to the role in the hierarchy. The returned 
   * object
   * can tell the hierarchical relationship to other nodes.
   *
   * @param roleType is the identifier of the role type in the policy
   * @param roleValue is the value of the role to give the reference to
   *
   * @return the reference to the node, or null, if no such role is defined
   */
  public RoleHierarchyNode getRole(String roleType, String roleValue);
}