Package org.forgerock.am.identity.application

Interface SpecialUserService

public interface SpecialUserService
Collection of methods for identifying whether a given String corresponds to the UniversalId or Dn of the super or special users. This is currently a means of pulling together disparate implementations from across AM, and may evolve more in the future. By default, the super user is amAdmin, and the special users are dsameuser and amService-UrlAccessAgent.

  • Method Details

    • isSuperOrDsameUserUniversalIdOrDn

      boolean isSuperOrDsameUserUniversalIdOrDn(String uuid)
      Returns true if the user is superuser
      Parameters:
      uuid - the uuid of the login user

    • isSuperUserOrSpecialUserDn

      boolean isSuperUserOrSpecialUserDn(String dn)
      Returns true if distinguished user name is a super administrator DN.
      Parameters:
      dn - Distinguished name of user.
      Returns:
      true if user is super administrator.

    • isSuperUserUniversalId

      boolean isSuperUserUniversalId(String dn)
      Returns true if and only if the user name belongs to a super user
      Parameters:
      dn - DN of the user
      Returns:
      true if the user is an admin user.

    • isSpecialUserDn

      boolean isSpecialUserDn(String dn)
      Returns true if distinguished user name is a special user DN.
      Parameters:
      dn - Distinguished name of user.
      Returns:
      true if user is a special user.