Package com.orientechnologies.orient.core.security

Class ODefaultSecuritySystem

java.lang.Object

com.orientechnologies.orient.core.security.ODefaultSecuritySystem

All Implemented Interfaces:

OSecuritySystem

public class ODefaultSecuritySystem
extends Object
implements OSecuritySystem

Provides an implementation of OServerSecurity.

Author:

S. Colin Leister

Constructor Summary

Constructors

Constructor	Description
ODefaultSecuritySystem()

Method Summary

Modifier and Type	Method	Description
void	activate(OrientDBInternal context, OSecurityConfig serverCfg)
void	addTemporaryUser(String iName, String iPassword, String iPermissions)
boolean	arePasswordsStored()
OSecurityUser	authenticate(ODatabaseSession session, OAuthenticationInfo authenticationInfo)
OSecurityUser	authenticate(ODatabaseSession session, String username, String password)
OSecurityUser	authenticateAndAuthorize(String iUserName, String iPassword, String iResourceToCheck)
OSecurityUser	authenticateServerUser(String username, String password)
void	close()
void	createSystemRoles(ODatabaseSession session)
boolean	existsUser(String user)
OAuditingService	getAuditing()	OServerSecurity Interface *
String	getAuthenticationHeader(String databaseName)
Map<String,String>	getAuthenticationHeaders(String databaseName)
OSecurityAuthenticator	getAuthenticator(String authMethod)	Returns the authenticator based on name, if one exists.
List<OSecurityAuthenticator>	getAuthenticatorsList()
ODocument	getComponentConfig(String name)
ODocument	getConfig()
OrientDBInternal	getContext()
List<OSecurityAuthenticator>	getEnabledAuthenticators()
OSecurityAuthenticator	getPrimaryAuthenticator()	Returns the first authenticator in the list, which is the primary authenticator.
OSecurityUser	getServerUser(String username)
OSyslog	getSyslog()
OSecurityUser	getSystemUser(String username, String dbName)	Returns the "System User" associated with 'username' from the system database.
OTokenSign	getTokenSign()
OSecurityUser	getUser(String username)	Some authenticators support maintaining a list of users and associated resources (and sometimes passwords).
boolean	isAuthorized(String username, String resource)
boolean	isDefaultAllowed()
boolean	isEnabled()
boolean	isServerUserAuthorized(String username, String resource)
boolean	isSingleSignOnSupported()
void	load(String cfgPath)
protected void	loadComponents()
void	log(OAuditingOperation operation, String dbName, OSecurityUser user, String message)	Logs to the auditing service, if installed.
OSecurityInternal	newSecurity(String database)
void	onAfterDynamicPlugins()
void	onAfterDynamicPlugins(OSecurityUser user)
void	registerSecurityClass(Class<?> cls)
void	reload(OSecurityUser user, ODocument configDoc)
void	reload(OSecurityUser user, String cfgPath)
void	reload(ODocument configDoc)
void	reload(String cfgPath)
void	reloadComponent(OSecurityUser user, String name, ODocument jsonConfig)
void	replacePasswordValidator(OPasswordValidator validator)
void	setAuthenticatorList(List<OSecurityAuthenticator> authenticators)
void	shutdown()
void	unregisterSecurityClass(Class<?> cls)
void	validatePassword(String username, String password)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

ODefaultSecuritySystem

public ODefaultSecuritySystem()

Method Details

activate

public void activate(OrientDBInternal context,
 OSecurityConfig serverCfg)

createSystemRoles

public void createSystemRoles(ODatabaseSession session)

shutdown

public void shutdown()

Specified by:

shutdown in interface OSecuritySystem

isDefaultAllowed

public boolean isDefaultAllowed()

Specified by:

isDefaultAllowed in interface OSecuritySystem

authenticate

public OSecurityUser authenticate(ODatabaseSession session,
 OAuthenticationInfo authenticationInfo)

Specified by:

authenticate in interface OSecuritySystem

authenticate

public OSecurityUser authenticate(ODatabaseSession session,
 String username,
 String password)

Specified by:

authenticate in interface OSecuritySystem

authenticateServerUser

public OSecurityUser authenticateServerUser(String username,
 String password)

Specified by:

authenticateServerUser in interface OSecuritySystem

getContext

public OrientDBInternal getContext()

Specified by:

getContext in interface OSecuritySystem

getAuthenticationHeader

public String getAuthenticationHeader(String databaseName)

Specified by:

getAuthenticationHeader in interface OSecuritySystem

getAuthenticationHeaders

public Map<String,String> getAuthenticationHeaders(String databaseName)

Specified by:

getAuthenticationHeaders in interface OSecuritySystem

getConfig

public ODocument getConfig()

Specified by:

getConfig in interface OSecuritySystem

getComponentConfig

public ODocument getComponentConfig(String name)

Specified by:

getComponentConfig in interface OSecuritySystem

getSystemUser

public OSecurityUser getSystemUser(String username,
 String dbName)

Returns the "System User" associated with 'username' from the system database. If not found, returns null. dbName is used to filter the assigned roles. It may be null.

Specified by:

getSystemUser in interface OSecuritySystem

isAuthorized

public boolean isAuthorized(String username,
 String resource)

Specified by:

isAuthorized in interface OSecuritySystem

isServerUserAuthorized

public boolean isServerUserAuthorized(String username,
 String resource)

Specified by:

isServerUserAuthorized in interface OSecuritySystem

isEnabled

public boolean isEnabled()

Specified by:

isEnabled in interface OSecuritySystem

arePasswordsStored

public boolean arePasswordsStored()

Specified by:

arePasswordsStored in interface OSecuritySystem

isSingleSignOnSupported

public boolean isSingleSignOnSupported()

Specified by:

isSingleSignOnSupported in interface OSecuritySystem

validatePassword

public void validatePassword(String username,
 String password)
                      throws OInvalidPasswordException

Specified by:

validatePassword in interface OSecuritySystem

Throws:

OInvalidPasswordException

replacePasswordValidator

public void replacePasswordValidator(OPasswordValidator validator)

getAuditing

public OAuditingService getAuditing()

OServerSecurity Interface *

Specified by:

getAuditing in interface OSecuritySystem

getAuthenticator

public OSecurityAuthenticator getAuthenticator(String authMethod)

Description copied from interface: OSecuritySystem

Returns the authenticator based on name, if one exists.

Specified by:

getAuthenticator in interface OSecuritySystem

getPrimaryAuthenticator

public OSecurityAuthenticator getPrimaryAuthenticator()

Description copied from interface: OSecuritySystem

Returns the first authenticator in the list, which is the primary authenticator.

Specified by:

getPrimaryAuthenticator in interface OSecuritySystem

getUser

public OSecurityUser getUser(String username)

Description copied from interface: OSecuritySystem

Some authenticators support maintaining a list of users and associated resources (and sometimes passwords).

Specified by:

getUser in interface OSecuritySystem

getServerUser

public OSecurityUser getServerUser(String username)

Specified by:

getServerUser in interface OSecuritySystem

getSyslog

public OSyslog getSyslog()

Specified by:

getSyslog in interface OSecuritySystem

log

public void log(OAuditingOperation operation,
 String dbName,
 OSecurityUser user,
 String message)

Description copied from interface: OSecuritySystem

Logs to the auditing service, if installed.

Specified by:

log in interface OSecuritySystem

dbName - May be null or empty.

user - May be null or empty.

registerSecurityClass

public void registerSecurityClass(Class<?> cls)

Specified by:

registerSecurityClass in interface OSecuritySystem

unregisterSecurityClass

public void unregisterSecurityClass(Class<?> cls)

Specified by:

unregisterSecurityClass in interface OSecuritySystem

load

public void load(String cfgPath)

reload

public void reload(String cfgPath)

Specified by:

reload in interface OSecuritySystem

reload

public void reload(OSecurityUser user,
 String cfgPath)

Specified by:

reload in interface OSecuritySystem

reload

public void reload(ODocument configDoc)

Specified by:

reload in interface OSecuritySystem

reload

public void reload(OSecurityUser user,
 ODocument configDoc)

Specified by:

reload in interface OSecuritySystem

reloadComponent

public void reloadComponent(OSecurityUser user,
 String name,
 ODocument jsonConfig)

Specified by:

reloadComponent in interface OSecuritySystem

onAfterDynamicPlugins

public void onAfterDynamicPlugins()

Specified by:

onAfterDynamicPlugins in interface OSecuritySystem

onAfterDynamicPlugins

public void onAfterDynamicPlugins(OSecurityUser user)

Specified by:

onAfterDynamicPlugins in interface OSecuritySystem

loadComponents

protected void loadComponents()

close

public void close()

authenticateAndAuthorize

public OSecurityUser authenticateAndAuthorize(String iUserName,
 String iPassword,
 String iResourceToCheck)

Specified by:

authenticateAndAuthorize in interface OSecuritySystem

existsUser

public boolean existsUser(String user)

Specified by:

existsUser in interface OSecuritySystem

addTemporaryUser

public void addTemporaryUser(String iName,
 String iPassword,
 String iPermissions)

Specified by:

addTemporaryUser in interface OSecuritySystem

newSecurity

public OSecurityInternal newSecurity(String database)

Specified by:

newSecurity in interface OSecuritySystem

setAuthenticatorList

public void setAuthenticatorList(List<OSecurityAuthenticator> authenticators)

getEnabledAuthenticators

public List<OSecurityAuthenticator> getEnabledAuthenticators()

getAuthenticatorsList

public List<OSecurityAuthenticator> getAuthenticatorsList()

getTokenSign

public OTokenSign getTokenSign()

Specified by:

getTokenSign in interface OSecuritySystem