Package org.opends.server.authorization.policy

Class AccessController

java.lang.Object

org.opends.server.authorization.policy.AccessController

public final class AccessController
extends Object

Enforces access controls for a single request and its responses.

Method Summary

Modifier and Type	Method	Description
Request	checkRequest(RequestContext context, Request request)	Checks whether the provided request is allowed or not.
Response	filterResponse(Response response)	Checks a response:

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Details

checkRequest

public Request checkRequest(RequestContext context,
 Request request)
                     throws LdapException

Checks whether the provided request is allowed or not.

Parameters:

context - The request context.

request - The request.

Returns:

The possibly transformed request.

Throws:

LdapException - If the request is not allowed.

filterResponse

public Response filterResponse(Response response)

Checks a response:

1) don't return search entries for which the user does not have read access 2) remove disallowed attributes from search result entries and pre/post read controls.

Parameters:

response - The response message.

Returns:

The filtered response which may be transformed in some way or null if it should not be returned.