Class StaticActionAuthorizationService<U>

java.lang.Object

com.svenruppert.jsentinel.action.StaticActionAuthorizationService<U>

Type Parameters:

U - subject type

All Implemented Interfaces:

ActionAuthorizationService<U>

public final class StaticActionAuthorizationService<U>
extends Object
implements ActionAuthorizationService<U>

Default ActionAuthorizationService that checks an ActionPermission against the subject's permission set obtained via the configured AuthorizationService.

The action's name is matched case-sensitively against the value of each permission returned by AuthorizationService.permissionsFor(Object), so applications can keep a single string vocabulary across both APIs while opting into the typed action layer.

On requireAllowed denial, this implementation emits an ActionDenied audit event before throwing.

Constructor Summary

Constructors

Constructor	Description
StaticActionAuthorizationService(AuthorizationService<U> authorizationService, JSentinelAuditService auditService)
StaticActionAuthorizationService(Class<U> subjectType)	Builds a service that resolves the AuthorizationService via JSentinelServiceResolver.

Method Summary

Modifier and Type	Method	Description
boolean	isAllowed(U subject, ActionPermission permission)
void	requireAllowed(U subject, ActionPermission permission)	Throws AccessDeniedException if the subject is not allowed.

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

StaticActionAuthorizationService

public StaticActionAuthorizationService(Class<U> subjectType)

Builds a service that resolves the AuthorizationService via JSentinelServiceResolver. Audit events are routed to JSentinelServiceResolver.securityAuditService() at check time.

Parameters:

subjectType - compile-time helper — kept on the constructor so the generic parameter is inferable; not stored

StaticActionAuthorizationService

public StaticActionAuthorizationService(AuthorizationService<U> authorizationService,
 JSentinelAuditService auditService)

Parameters:

authorizationService - the application's authorization service

auditService - audit sink, or null to resolve from JSentinelServiceResolver at each check

Method Details

isAllowed

public boolean isAllowed(U subject,
 ActionPermission permission)

Specified by:

isAllowed in interface ActionAuthorizationService<U>

Parameters:

subject - the calling subject (may be null)

permission - the action permission to evaluate

Returns:

true if subject may execute permission

requireAllowed

public void requireAllowed(U subject,
 ActionPermission permission)

Description copied from interface: ActionAuthorizationService

Throws AccessDeniedException if the subject is not allowed. Implementations should additionally publish an ActionDenied audit event in this case.

Specified by:

requireAllowed in interface ActionAuthorizationService<U>

Parameters:

subject - the calling subject (may be null)

permission - the action permission to enforce