webservicesubject.java

一个完整的XACML工程,学习XACML技术的好例子!

/*
* Copyright (c) 2006, University of Kent
* All rights reserved.
*
* Redistribution and use in source and binary forms, with or without 
* modification, are permitted provided that the following conditions are met:
*
* Redistributions of source code must retain the above copyright notice, this 
* list of conditions and the following disclaimer.
* 
* Redistributions in binary form must reproduce the above copyright notice, 
* this list of conditions and the following disclaimer in the documentation 
* and/or other materials provided with the distribution. 
*
* 1. Neither the name of the University of Kent nor the names of its 
* contributors may be used to endorse or promote products derived from this 
* software without specific prior written permission. 
*
* 2. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS  
* IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
* THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 
* PURPOSE ARE DISCLAIMED. 
*
* 3. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE 
* LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR 
* CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 
* SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS 
* INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN 
* CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE 
* POSSIBILITY OF SUCH DAMAGE.
*
* 4. YOU AGREE THAT THE EXCLUSIONS IN PARAGRAPHS 2 AND 3 ABOVE ARE REASONABLE
* IN THE CIRCUMSTANCES.  IN PARTICULAR, YOU ACKNOWLEDGE (1) THAT THIS
* SOFTWARE HAS BEEN MADE AVAILABLE TO YOU FREE OF CHARGE, (2) THAT THIS
* SOFTWARE IS NOT "PRODUCT" QUALITY, BUT HAS BEEN PRODUCED BY A RESEARCH
* GROUP WHO DESIRE TO MAKE THIS SOFTWARE FREELY AVAILABLE TO PEOPLE WHO WISH
* TO USE IT, AND (3) THAT BECAUSE THIS SOFTWARE IS NOT OF "PRODUCT" QUALITY
* IT IS INEVITABLE THAT THERE WILL BE BUGS AND ERRORS, AND POSSIBLY MORE
* SERIOUS FAULTS, IN THIS SOFTWARE.
*
* 5. This license is governed, except to the extent that local laws
* necessarily apply, by the laws of England and Wales.
*/
/*
 * WebServiceSubject.java
 *
 * Created on 02 February 2006, 17:28
 *
 * To change this template, choose Tools | Options and locate the template under
 * the Source Creation and Management node. Right-click the template and choose
 * Open. You can then make changes to the template in the Source Editor.
 */

package issrg.web.service;

import java.security.Principal;
import issrg.pba.Subject;
import issrg.pba.Credentials;
import issrg.pba.CredentialsService;

/**
 * The Permis Web Service implementation of a subject. It knows the holder and its
 * credentials, it contains additional service for checking the credentials
 * validity. It knows what policy it is applicable to, and works for one
 * PermisRBAC object only.
 *
 * @author Linying Su
 */

public class WebServiceSubject implements Subject {
  private Principal SubjectName;
  private Credentials Creds;
  private issrg.pba.PBAAPI owner;

  protected WebServiceSubject(){}

  /**
   * This constructor builds a subject from a distinguished name and the
   * credentials the holder possesses.
   *
   * @param owner is the reference to the PBA API implementation that has
   *      created this object; so the owner could ensure it uses the
   *      subject for the right policy
   * @param DN the distinguished name of the subject
   * @param creds the Credential of the subject
   */
  protected WebServiceSubject(issrg.pba.PBAAPI owner, Principal DN, Credentials credsIn){
    this.owner = owner;
    this.SubjectName=DN;
    this.Creds = credsIn;
  }
  
  /**
   * This method returns the Credentials (roles for the Permis project) of the
   * subject.
   *
   * @return the Credential of the subject
   */
  public Credentials exportCreds(){
    return  this.Creds;
  }

  /**
   * This method returns the distinguished name of the subject.
   *
   * @return the Principal, representing the name of the holder
   */
  public Principal getHolder(){
    return this.SubjectName;
  }

  /**
   * This method returns the object providing additional service on the set of
   * credentials.
   *
   * @return the CredentialService instance; can be null, if no additional
   *    services were attached to the credentials
   */
  public CredentialsService getService(){
    return null;
  }

  /**
   * This method returns the owner of the Subject object.
   */
  public issrg.pba.PBAAPI getOwner(){
    return this.owner;
  }
}