com.gigaspaces.security.fs

Class FileSecurityManager

java.lang.Object

com.gigaspaces.security.fs.FileSecurityManager

All Implemented Interfaces:

SecurityManager

public class FileSecurityManager
extends Object
implements SecurityManager

A File based SecurityManager responsible for authenticating requests against users stored in a file, and creating a FileDirectoryManager for managing the directory.

Since:

7.0.1

Author:

Moran Avigdor

Field Summary

Fields

Modifier and Type	Field and Description
static String	ADMIN The default (first-time) directory manager user

Fields inherited from interface com.gigaspaces.security.SecurityManager

SECURITY_MANAGER_CLASS_PROPERTY_KEY

Constructor Summary

Constructors

Constructor and Description
FileSecurityManager()

Method Summary

Modifier and Type	Method and Description
Authentication	authenticate(UserDetails userDetails) Attempts to authenticate the passed user represented by UserDetails, returning a fully populated UserDetails object (including granted authorities) if successful.
void	close() Closes any excess resource kept by the security manager; e.g.
DirectoryManager	createDirectoryManager(UserDetails userDetails) Attempts to authenticate the passed user represented by UserDetails, granting access only for users that are allowed to manage the directory.
void	init(Properties properties) Initializes this security manager instance with implementation specific properties, and any resource creation/access needed.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

ADMIN

public static final String ADMIN

The default (first-time) directory manager user

See Also:

Constant Field Values

Constructor Detail

FileSecurityManager

public FileSecurityManager()

Method Detail

authenticate

public Authentication authenticate(UserDetails userDetails)
                            throws AuthenticationException

Description copied from interface: SecurityManager

Attempts to authenticate the passed user represented by UserDetails, returning a fully populated UserDetails object (including granted authorities) if successful.

Specified by:

authenticate in interface SecurityManager

Parameters:

userDetails - the user request object

Returns:

a fully authenticated object including authorities

Throws:

AuthenticationException - if authentication fails

createDirectoryManager

public DirectoryManager createDirectoryManager(UserDetails userDetails)
                                        throws AuthenticationException,
                                               AccessDeniedException

Description copied from interface: SecurityManager

Attempts to authenticate the passed user represented by UserDetails, granting access only for users that are allowed to manage the directory.

Creates a directory manager for managing of users and roles, granting access only for users that are allowed to manage, but may be restrictive (to read-only) based on their privileges.

If the directory is to be managed by an external tool, implementors may wish to throw DirectoryAccessDeniedException to deny access to the API (e.g. from UI).

Specified by:

createDirectoryManager in interface SecurityManager

Parameters:

userDetails - the user request object

Returns:

a directory manager instance

Throws:

AuthenticationException - if authentication fails for the specified user

AccessDeniedException - if not granted sufficient access required to manage role details

DirectoryAccessDeniedException - if the directory should not be managed by API.

close

public void close()

Description copied from interface: SecurityManager

Closes any excess resource kept by the security manager; e.g. connection to a data-source.

Specified by:

close in interface SecurityManager

init

public void init(Properties properties)
          throws SecurityException

Description copied from interface: SecurityManager

Initializes this security manager instance with implementation specific properties, and any resource creation/access needed.

Specified by:

init in interface SecurityManager

Parameters:

properties - properties to use configure this instance.

Throws:

SecurityException