站内搜索: 请输入搜索关键词
当前页面: 在线文档首页 > JBoss JBPM 3.0.4 API 英文版文档

Authorization (jbpm-3.0.4) - JBoss JBPM 3.0.4 API 英文版文档


org.jbpm.security
Class Authorization

java.lang.Object
  extended byorg.jbpm.security.Authorization

public class Authorization
extends java.lang.Object

provides central access point to the configurable authorization.

By default, jBPM does not do authorization checking. To activate authorization checking, set the property 'jbpm.authorizer' to the fully qualified class name of an Authorizer implementation.

When an Authorizer is configured, the jBPM code will call its checkPermission method for security sensitive workflow operations. The workflow operation being performed will be indicated with a java.security.Permission.

Package org.jbpm.security.authorizer contains a number of Authorizer implementations and package org.jbpm.security.permission contains the permissions that are checked by the jBPM code.


Field Summary
protected static Authorizer authorizer
           
 
Constructor Summary
Authorization()
           
 
Method Summary
static void checkPermission(java.security.Permission permission, ProcessDefinition processDefinition, Token token)
          central method called by the jBPM code to check authorization.
 
Methods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
 

Field Detail

authorizer

protected static Authorizer authorizer
Constructor Detail

Authorization

public Authorization()
Method Detail

checkPermission

public static void checkPermission(java.security.Permission permission,
                                   ProcessDefinition processDefinition,
                                   Token token)
central method called by the jBPM code to check authorization. This method will delegate to the configured Authorizer

Throws:
java.security.AccessControlException - if the current authenticated actor is not authorized.


Version : jbpm-3.0.4