com.atlassian.crowd.manager.permission

Interface UserPermissionService

All Known Implementing Classes:

RecoveryModeAwareUserPermissionService, UserPermissionServiceImpl

public interface UserPermissionService

Check Crowd access permissions for users, eg SYS_ADMIN and ADMIN.

Method Summary

Modifier and Type	Method and Description
boolean	currentUserHasPermission(UserPermission permission) Does the current user have the provided permission.
boolean	hasPermission(String username, UserPermission permission) Does the provided user have the provided permission.
boolean	hasPermissionOutsideOfGroups(String username, UserPermission permission, Collection<DirectoryGroup> excludedGroups) Does the provided user have the provided permission when not considering the provided groups.

Method Detail

currentUserHasPermission

boolean currentUserHasPermission(UserPermission permission)

Does the current user have the provided permission.

Parameters:

permission - permission required

Returns:

true if the user has permission

hasPermission

boolean hasPermission(@Nullable
                      String username,
                      UserPermission permission)

Does the provided user have the provided permission.

Parameters:

username - user to check, null for the anonymous user

permission - permission required

Returns:

true if the user has permission

hasPermissionOutsideOfGroups

boolean hasPermissionOutsideOfGroups(@Nullable
                                     String username,
                                     UserPermission permission,
                                     Collection<DirectoryGroup> excludedGroups)

Does the provided user have the provided permission when not considering the provided groups. This method is intended to be used to determine if a group is exclusively providing a given permission.

Parameters:

username - user to check, null for the anonymous user

permission - permission required

excludedGroups - groups to exclude in permission check, or an empty list otherwise

Returns:

true if the user has permission outside of the provided groups