public class

AuthorisationManagerImpl

extends Object
implements Startable AuthorisationManager
java.lang.Object
   ↳ com.atlassian.jira.security.auth.AuthorisationManagerImpl

Summary

Public Constructors
AuthorisationManagerImpl(PermissionManager permissionManager, PluginAccessor pluginAccessor, WebworkPluginSecurityServiceHelper webworkPluginSecurityServiceHelper, EventPublisher eventPublisher)
Public Methods
boolean authoriseForLogin(ApplicationUser user, HttpServletRequest httpServletRequest)
Called to ask whether a user (non null always) is authorised to perform the given request as a login event
boolean authoriseForRole(ApplicationUser user, HttpServletRequest httpServletRequest, String role)
Called to ask whether a user (non null always) is authorised to perform the given request as a login event
Set<String> getRequiredRoles(HttpServletRequest httpServletRequest)
Gets the set of role strings that are examined by Seraph to decide if a user is authorised to execute a request.
void onPluginModuleDisabled(PluginModuleDisabledEvent event)
void onPluginModuleEnabled(PluginModuleEnabledEvent event)
void start()
This method wil be called after the plugin system is fully initialised and all components added to the dependency injection framework.
[Expand]
Inherited Methods
From class java.lang.Object
From interface com.atlassian.jira.extension.Startable
From interface com.atlassian.jira.security.auth.AuthorisationManager

Public Constructors

public AuthorisationManagerImpl (PermissionManager permissionManager, PluginAccessor pluginAccessor, WebworkPluginSecurityServiceHelper webworkPluginSecurityServiceHelper, EventPublisher eventPublisher)

Public Methods

public boolean authoriseForLogin (ApplicationUser user, HttpServletRequest httpServletRequest)

Called to ask whether a user (non null always) is authorised to perform the given request as a login event

Parameters
user a non null user
httpServletRequest the request in play
Returns
  • true if they are authorised to perform the request

public boolean authoriseForRole (ApplicationUser user, HttpServletRequest httpServletRequest, String role)

Called to ask whether a user (non null always) is authorised to perform the given request as a login event

Parameters
user a possibly null user
httpServletRequest the request in play
role one or more of the roles that was given out during getRequiredRoles(javax.servlet.http.HttpServletRequest)
Returns
  • true if they are authorised to perform the request

public Set<String> getRequiredRoles (HttpServletRequest httpServletRequest)

Gets the set of role strings that are examined by Seraph to decide if a user is authorised to execute a request.

Parameters
httpServletRequest the request in play
Returns
  • a set of roles

public void onPluginModuleDisabled (PluginModuleDisabledEvent event)

public void onPluginModuleEnabled (PluginModuleEnabledEvent event)

public void start ()

This method wil be called after the plugin system is fully initialised and all components added to the dependency injection framework.

Throws
Exception