Package org.forgerock.am.identity.application

Interface SpecialUserService

  • public interface SpecialUserService
    Collection of methods for identifying whether a given String corresponds to the UniversalId or Dn of the super or special users. This is currently a means of pulling together disparate implementations from across AM, and may evolve more in the future. By default, the super user is amAdmin, and the special users are dsameuser and amService-UrlAccessAgent.

    • Method Detail

      • isSuperOrDsameUserUniversalIdOrDn

        boolean isSuperOrDsameUserUniversalIdOrDn​(String uuid)
        Returns true if the user is superuser
        Parameters:
        uuid - the uuid of the login user

      • isSuperUserOrSpecialUserDn

        boolean isSuperUserOrSpecialUserDn​(String dn)
        Returns true if distinguished user name is a super administrator DN.
        Parameters:
        dn - Distinguished name of user.
        Returns:
        true if user is super administrator.

      • isSuperUserUniversalId

        boolean isSuperUserUniversalId​(String dn)
        Returns true if and only if the user name belongs to a super user
        Parameters:
        dn - DN of the user
        Returns:
        true if the user is an admin user.

      • isSpecialUserDn

        boolean isSpecialUserDn​(String dn)
        Returns true if distinguished user name is a special user DN.
        Parameters:
        dn - Distinguished name of user.
        Returns:
        true if user is a special user.