eu.emi.emir.security
Class ServerSecurityProperties

java.lang.Object
  eu.unicore.security.canl.DefaultAuthnAndTrustConfiguration
      eu.emi.emir.security.DefaultServerSecurityConfiguration
          eu.emi.emir.security.ServerSecurityProperties

All Implemented Interfaces:

IServerSecurityConfiguration, eu.unicore.security.canl.IAuthnAndTrustConfiguration

public class ServerSecurityProperties
extends DefaultServerSecurityConfiguration

EMIR security configuration implementation using a Properties source.

Author:

a.memon

Field Summary

static Map<String,eu.unicore.util.configuration.PropertyMD>	META
static String	PREFIX
static String	PROP_AIP_ORDER attribute sources order property
static String	PROP_AIP_PREFIX base for AIP property names
static String	PROP_CHECKACCESS do we check access?
static String	PROP_CHECKACCESS_ACL access control PDP class name (implementing de.fzj.uas.security.XacmlPDP)
static String	PROP_CHECKACCESS_PDP access control PDP class name (implementing eu.emir.security.RegistryPDP)
static String	PROP_CHECKACCESS_PDPCONFIG configuration file for the PDP
static String	PROP_SSL_ENABLED property defining whether SSL is enabled

Constructor Summary

ServerSecurityProperties(Properties p)

ServerSecurityProperties(Properties source, eu.unicore.security.canl.IAuthnAndTrustConfiguration authAndTrust)

Method Summary

Properties	getRawProperties()
boolean	isAccessControlEnabled(String service)

Methods inherited from class eu.emi.emir.security.DefaultServerSecurityConfiguration

getACLConfigurationFile, getAip, getPdp, getPdpConfigurationFile, isACLAccessControlEnabled, isSslEnabled, isXACMLAccessControlEnabled, setAclAccessControlEnabled, setAclConfigurationFile, setAip, setPdp, setPdpConfigFile, setSslEnabled, setXACMLAccessControlEnabled

Methods inherited from class eu.unicore.security.canl.DefaultAuthnAndTrustConfiguration

clone, getCredential, getValidator, setCredential, setValidator

Methods inherited from class java.lang.Object

equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface eu.unicore.security.canl.IAuthnAndTrustConfiguration

getCredential, getValidator

Field Detail

PREFIX

public static final String PREFIX

See Also:

Constant Field Values

PROP_SSL_ENABLED

public static final String PROP_SSL_ENABLED

property defining whether SSL is enabled

See Also:

Constant Field Values

PROP_CHECKACCESS

public static final String PROP_CHECKACCESS

do we check access?

See Also:

Constant Field Values

PROP_CHECKACCESS_PDP

public static final String PROP_CHECKACCESS_PDP

access control PDP class name (implementing eu.emir.security.RegistryPDP)

See Also:

Constant Field Values

PROP_CHECKACCESS_PDPCONFIG

public static final String PROP_CHECKACCESS_PDPCONFIG

configuration file for the PDP

See Also:

Constant Field Values

PROP_AIP_PREFIX

public static final String PROP_AIP_PREFIX

base for AIP property names

See Also:

Constant Field Values

PROP_AIP_ORDER

public static final String PROP_AIP_ORDER

attribute sources order property

See Also:

Constant Field Values

PROP_CHECKACCESS_ACL

public static final String PROP_CHECKACCESS_ACL

access control PDP class name (implementing de.fzj.uas.security.XacmlPDP)

See Also:

Constant Field Values

META

public static final Map<String,eu.unicore.util.configuration.PropertyMD> META

Constructor Detail

ServerSecurityProperties

public ServerSecurityProperties(Properties p)
                         throws Exception

Throws:

Exception

ServerSecurityProperties

public ServerSecurityProperties(Properties source,
                                eu.unicore.security.canl.IAuthnAndTrustConfiguration authAndTrust)
                         throws Exception

Parameters:

p -

authAndTrust -

Throws:

Exception

Method Detail

getRawProperties

public Properties getRawProperties()

isAccessControlEnabled

public boolean isAccessControlEnabled(String service)

Specified by:

isAccessControlEnabled in interface IServerSecurityConfiguration

Overrides:

isAccessControlEnabled in class DefaultServerSecurityConfiguration

Returns:

do we check access on the web service level (using PDP) for a particular service?