Examples with AuthorizationDecisionType com.evolveum.midpoint.xml.ns._public.common.common_3.AuthorizationDecisionType used on opensource projects

Example 11 with AuthorizationDecisionType

use of com.evolveum.midpoint.xml.ns._public.common.common_3.AuthorizationDecisionType in project midpoint by Evolveum.

the class ObjectSecurityConstraintsImpl method findItemDecisionPhase.

public AuthorizationDecisionType findItemDecisionPhase(ItemPath nameOnlyItemPath, String actionUrl, AuthorizationPhaseType phase) {
    ItemSecurityConstraintsImpl itemConstraints = getItemConstraints(actionUrl, phase);
    AuthorizationDecisionType decision = null;
    if (itemConstraints != null) {
        decision = itemConstraints.findItemDecision(nameOnlyItemPath);
        if (AuthorizationDecisionType.DENY.equals(decision)) {
            return AuthorizationDecisionType.DENY;
        }
    }
    ItemSecurityConstraintsImpl itemConstraintsActionAll = getItemConstraints(AuthorizationConstants.AUTZ_ALL_URL, phase);
    if (itemConstraintsActionAll == null) {
        return decision;
    }
    AuthorizationDecisionType decisionActionAll = itemConstraintsActionAll.findItemDecision(nameOnlyItemPath);
    if (AuthorizationDecisionType.DENY.equals(decisionActionAll)) {
        return AuthorizationDecisionType.DENY;
    }
    if (AuthorizationDecisionType.ALLOW.equals(decisionActionAll)) {
        return AuthorizationDecisionType.ALLOW;
    }
    return decision;
}