com.atlassian.crowd.manager.permission

Class UserPermissionAdminServiceImpl

java.lang.Object

com.atlassian.crowd.manager.permission.UserPermissionAdminServiceImpl

All Implemented Interfaces:

UserPermissionAdminService

@Transactional
public class UserPermissionAdminServiceImpl
extends Object
implements UserPermissionAdminService

All methods on this class require at least ADMIN permissions. This is handled by AdminRequiredInterceptor via applicationContext-CrowdServer.xml. For this reason we are not doing any permission checks inside this method, except for ensuring that ADMINs cannot revoke or downgrade the permissions of SYSADMINs.

Constructor Summary

Constructors

Constructor and Description
UserPermissionAdminServiceImpl(InternalUserPermissionDAO permissionDAO, UserPermissionService permissionService, AuthenticatedUserProvider userProvider, DirectoryManager directoryManager, InternalApplicationHelper applicationHelper)

Method Summary

Modifier and Type	Method and Description
Page<DirectoryGroup>	findGroups(int start, int limit) List all groups that the Crowd console application can see.
Page<DirectoryGroup>	findGroupsByPrefix(String prefix, int start, int limit) List all groups that the Crowd console application can see, filtered by prefix.
Page<PermittedGroup>	findGroupsWithPermission(int start, int limit) Find all groups with an explicit permission Note: there are no authentication checks in this method
Page<PermittedGroup>	findGroupsWithPermissionByPrefix(String prefix, int start, int limit) Find all groups with an explicit permission Note: there are no authentication checks in this method
void	revokePermissionsForGroup(DirectoryGroup group) Remove all permissions from the given group.
void	setPermissionForGroups(List<? extends DirectoryGroup> directoryGroups, UserPermission permission) Set the granted permissions for each directoryGroup to permission.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

UserPermissionAdminServiceImpl

public UserPermissionAdminServiceImpl(InternalUserPermissionDAO permissionDAO,
                                      UserPermissionService permissionService,
                                      AuthenticatedUserProvider userProvider,
                                      DirectoryManager directoryManager,
                                      InternalApplicationHelper applicationHelper)

Method Detail

findGroups

public Page<DirectoryGroup> findGroups(int start,
                                       int limit)

Description copied from interface: UserPermissionAdminService

List all groups that the Crowd console application can see. Groups will be sorted by (directory name, group name) in dictionary order.

Specified by:

findGroups in interface UserPermissionAdminService

Parameters:

start - index to start page at

limit - max number of results to return or 0 for no limit

findGroupsByPrefix

public Page<DirectoryGroup> findGroupsByPrefix(@Nonnull
                                               String prefix,
                                               int start,
                                               int limit)

Description copied from interface: UserPermissionAdminService

List all groups that the Crowd console application can see, filtered by prefix. Groups will be sorted by (directory name, group name) in dictionary order.

Specified by:

findGroupsByPrefix in interface UserPermissionAdminService

start - index to start page at

limit - max number of results to return or 0 for no limit

revokePermissionsForGroup

public void revokePermissionsForGroup(DirectoryGroup group)
                               throws DirectoryNotFoundException,
                                      OperationFailedException,
                                      ApplicationNotFoundException,
                                      UserPermissionDowngradeException

Description copied from interface: UserPermissionAdminService

Remove all permissions from the given group.

Specified by:

revokePermissionsForGroup in interface UserPermissionAdminService

Parameters:

group - group to remove permissions from

Throws:

UserPermissionDowngradeException - if the user can not remove a permission because doing so would downgrade their own permissions

DirectoryNotFoundException

OperationFailedException

ApplicationNotFoundException

setPermissionForGroups

public void setPermissionForGroups(List<? extends DirectoryGroup> directoryGroups,
                                   UserPermission permission)
                            throws DirectoryNotFoundException,
                                   OperationFailedException,
                                   ApplicationNotFoundException,
                                   UserPermissionException,
                                   UserPermissionDowngradeException

Description copied from interface: UserPermissionAdminService

Set the granted permissions for each directoryGroup to permission. All other permissions will be revoked. Groups must be in directories that are mapped to the "crowd" application

Specified by:

setPermissionForGroups in interface UserPermissionAdminService

Parameters:

directoryGroups - list of groups to set permissions on

permission - permission to set to

Throws:

UserPermissionDowngradeException - if the user can not remove a permission because doing so would downgrade their own permissions

DirectoryNotFoundException

OperationFailedException

ApplicationNotFoundException

UserPermissionException

findGroupsWithPermission

public Page<PermittedGroup> findGroupsWithPermission(int start,
                                                     int limit)
                                              throws UserPermissionException

Description copied from interface: UserPermissionAdminService

Find all groups with an explicit permission Note: there are no authentication checks in this method

Specified by:

findGroupsWithPermission in interface UserPermissionAdminService

Parameters:

start - index to start page at

limit - max number of results to return or 0 for no limit

Returns:

the highest permission for each group with an explicit permission. If a group has ADMIN and SYS_ADMIN, only return SYS_ADMIN

Throws:

UserPermissionException

findGroupsWithPermissionByPrefix

public Page<PermittedGroup> findGroupsWithPermissionByPrefix(@Nonnull
                                                             String prefix,
                                                             int start,
                                                             int limit)
                                                      throws UserPermissionException

Description copied from interface: UserPermissionAdminService

Find all groups with an explicit permission Note: there are no authentication checks in this method

Specified by:

findGroupsWithPermissionByPrefix in interface UserPermissionAdminService

Parameters:

prefix - filter group names by name prefix

start - index to start page at

limit - max number of results to return or 0 for no limit

Returns:

the highest permission for each group with an explicit permission. If a group has ADMIN and SYS_ADMIN, only return SYS_ADMIN

Throws:

UserPermissionException