dk.brics.jwig.persistence.security

Interface DirectObjectSecurityManager

All Superinterfaces:

DispatchListener

All Known Implementing Classes:

DirectObjectSecurityManagerImpl

public interface DirectObjectSecurityManager
extends DispatchListener

The direct object security manager is responsible for limiting the access to data referenced by and ID in URL's or forms. An URL could look something like http://www.example.com/secretdata?user=42. The user can easily change user=42 to user=43 hereby getting access to secret data. This manager is responsible for handling the model that gives access to data.

Method Summary

Methods

Modifier and Type	Method and Description
boolean	hasAccess(Persistable persistable) Returns true if the object is accessible

Methods inherited from interface dk.brics.jwig.server.DispatchListener

threadDismissed, threadDispatched

Method Detail

hasAccess

boolean hasAccess(Persistable persistable)

Returns true if the object is accessible