com.atlassian.crowd.manager.permission

Interface UserPermissionService

All Known Implementing Classes:

RecoveryModeAwareUserPermissionService, UserPermissionServiceImpl

public interface UserPermissionService

Check Crowd access permissions for users, eg SYS_ADMIN and ADMIN.

Method Summary

Modifier and Type	Method and Description
boolean	currentUserHasPermission(UserPermission permission) Does the current user have the provided permission.
Set<User>	getGroupLevelAdmins(boolean considerOnlyTargetGroupsWithApplications)
Set<User>	getSysAdmins(Application application, boolean includeLocallyCachedOnly)
boolean	hasPermission(String username, UserPermission permission) Does the provided user have the provided permission.
boolean	hasPermissionOutsideOfGroups(String username, UserPermission permission, Collection<DirectoryGroup> excludedGroups) Does the provided user have the provided permission when not considering the provided groups.
boolean	isGroupLevelAdmin(String username) Does the provided user have Group Level Admin permissions.

Method Detail

currentUserHasPermission

boolean currentUserHasPermission(UserPermission permission)

Does the current user have the provided permission.

Parameters:

permission - permission required

Returns:

true if the user has permission

hasPermission

boolean hasPermission(@Nullable
                      String username,
                      UserPermission permission)

Does the provided user have the provided permission.

Parameters:

username - user to check, null for the anonymous user

permission - permission required

Returns:

true if the user has permission

hasPermissionOutsideOfGroups

boolean hasPermissionOutsideOfGroups(@Nullable
                                     String username,
                                     UserPermission permission,
                                     Collection<DirectoryGroup> excludedGroups)

Does the provided user have the provided permission when not considering the provided groups.

This method is intended to be used to determine if a group is exclusively providing a given permission.

Parameters:

username - user to check, null for the anonymous user

permission - permission required

excludedGroups - groups to exclude in permission check, or an empty list otherwise

Returns:

true if the user has permission outside of the provided groups

isGroupLevelAdmin

boolean isGroupLevelAdmin(@Nullable
                          String username)

Does the provided user have Group Level Admin permissions.

Parameters:

username - user to check, null for anonymous user

Returns:

true if the user has Group Level Admin permissions

getSysAdmins

@ExperimentalApi
Set<User> getSysAdmins(Application application,
                                        boolean includeLocallyCachedOnly)
                                 throws DirectoryNotFoundException,
                                        OperationFailedException

Parameters:

application - application the permission applies to

includeLocallyCachedOnly - if set to true will limit search to users stored locally

Returns:

users with SYS_ADMIN permission.

Throws:

DirectoryNotFoundException

OperationFailedException

getGroupLevelAdmins

@ExperimentalApi
Set<User> getGroupLevelAdmins(boolean considerOnlyTargetGroupsWithApplications)
                                        throws DirectoryNotFoundException,
                                               OperationFailedException

Parameters:

considerOnlyTargetGroupsWithApplications - whether groups without any active application should be taken into account

Returns:

users with group level admin permission.

Throws:

DirectoryNotFoundException

OperationFailedException