com.sas.edir
Interface EnterpriseDirectorySecurity

public interface EnterpriseDirectorySecurity

A common interface for classes that provide security services for a specific Enterprise Directory server.

Version:

1.0

Author:

SAS

Field Summary

static int	SECURITY_IDENT_GROUP The permission applies to a group of users.
static int	SECURITY_IDENT_UNKNOWN It's unknown whether the DN represents a user or group.
static int	SECURITY_IDENT_USER The permission applies to an individual user.
static int	SECURITY_OPERATION_ALLOW Specifies that an operation is intended to allow access to a given object.
static int	SECURITY_OPERATION_DENY Specifies that an operation is intended to deny access to a given object.
static int	SECURITY_PERMISSION_ADD Represents the permission to add an entry to the directory.
static int	SECURITY_PERMISSION_ALL Represents all permissions.
static int	SECURITY_PERMISSION_COMPARE Represents the permission to compare on an entry or attribute.
static int	SECURITY_PERMISSION_DELETE Represents the permission to delete an entry.
static int	SECURITY_PERMISSION_READ Represents the permission to read an entry or attribute in the directory.
static int	SECURITY_PERMISSION_SEARCH Represents the permission to search on an entry or attribute.
static int	SECURITY_PERMISSION_WRITE Represents the permission to write an entry or attribute in the directory.

Method Summary

void	setSecurity(EnterpriseDirectory edir, java.lang.String dn, int type, java.lang.String subject, int operation, int permission) Set the security on an entry.
void	setSecurity(EnterpriseDirectory edir, java.lang.String dn, int type, java.lang.String subject, int operation, int permission, boolean isOwner) Set the security on an entry.

Field Detail

SECURITY_OPERATION_ALLOW

public static final int SECURITY_OPERATION_ALLOW

Specifies that an operation is intended to allow access to a given object.

SECURITY_OPERATION_DENY

public static final int SECURITY_OPERATION_DENY

Specifies that an operation is intended to deny access to a given object.

SECURITY_PERMISSION_READ

public static final int SECURITY_PERMISSION_READ

Represents the permission to read an entry or attribute in the directory.

SECURITY_PERMISSION_WRITE

public static final int SECURITY_PERMISSION_WRITE

Represents the permission to write an entry or attribute in the directory.

SECURITY_PERMISSION_SEARCH

public static final int SECURITY_PERMISSION_SEARCH

Represents the permission to search on an entry or attribute.

SECURITY_PERMISSION_COMPARE

public static final int SECURITY_PERMISSION_COMPARE

Represents the permission to compare on an entry or attribute.

SECURITY_PERMISSION_DELETE

public static final int SECURITY_PERMISSION_DELETE

Represents the permission to delete an entry.

SECURITY_PERMISSION_ADD

public static final int SECURITY_PERMISSION_ADD

Represents the permission to add an entry to the directory.

SECURITY_PERMISSION_ALL

public static final int SECURITY_PERMISSION_ALL

Represents all permissions.

SECURITY_IDENT_USER

public static final int SECURITY_IDENT_USER

The permission applies to an individual user.

SECURITY_IDENT_GROUP

public static final int SECURITY_IDENT_GROUP

The permission applies to a group of users.

SECURITY_IDENT_UNKNOWN

public static final int SECURITY_IDENT_UNKNOWN

It's unknown whether the DN represents a user or group.

Method Detail

setSecurity

public void setSecurity(EnterpriseDirectory edir,
                        java.lang.String dn,
                        int type,
                        java.lang.String subject,
                        int operation,
                        int permission)

Set the security on an entry.

Parameters:

edir - An EnterpriseDirectory service with sufficient access to set the security attributes of the entry.

dn - The context of the entry to update.

type - User, Group, or unknown.

subject - The user or group to allow/deny access.

operation - allow or deny.

permission - Flags specifying the access level.

setSecurity

public void setSecurity(EnterpriseDirectory edir,
                        java.lang.String dn,
                        int type,
                        java.lang.String subject,
                        int operation,
                        int permission,
                        boolean isOwner)

Set the security on an entry.

Parameters:

edir - An EnterpriseDirectory service with sufficient access to set the security attributes of the entry.

dn - The context of the entry to update.

type - User, Group, or unknown.

subject - The user or group to allow/deny access.

operation - allow or deny.

permission - Flags specifying the access level.

isOwner - Flag indicating whether this user owns the entry.