uk.ac.soton.itinnovation.grid.pbac2.pep
Class DynamicPEP<T>

java.lang.Object
  uk.ac.soton.itinnovation.grid.pbac2.pep.DynamicPEP<T>

All Implemented Interfaces:

InvocationHandler

public class DynamicPEP<T>
extends Object
implements InvocationHandler

This class creates a proxy object that wraps an object with a PEP. Calling a method on the proxy object will call PDP.lockAndCheck(java.lang.String, uk.ac.soton.itinnovation.grid.types.SubjectDescription, java.lang.String) first, then call the wrapped object's method, and then unlock the resource.

The action is the name of the method being invoked.

Method Summary

static <T> T	dynamicPEP(Class<T> iface) Create a proxy for 'iface', where all public methods are PEP-wrapped.
static <T> T	dynamicPEP(Class<T> iface, T impl, String resource, SubjectDescription subject) Create a proxy for 'iface', where all public methods are PEP-wrapped.
Object	invoke(Object proxy, Method method, Object[] args)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

dynamicPEP

public static <T> T dynamicPEP(Class<T> iface)

Create a proxy for 'iface', where all public methods are PEP-wrapped.

Parameters:

iface - the interface of the service to test (see ImplementationFactory)

Returns:

an implementation of the interface that checks each access with the PDP

dynamicPEP

public static <T> T dynamicPEP(Class<T> iface,
                               T impl,
                               String resource,
                               SubjectDescription subject)

Create a proxy for 'iface', where all public methods are PEP-wrapped.

Parameters:

iface - the interface of the object to wrap

impl - an implementation of iface, or null to get one using the ImplementationFactory

resource - the PBAC resource being protected, or null to use ProcessContextHelper.getProcessContext()

subject - the user accessing the resource, or null to use AuthenticatedContextHelper.getCurrentUser()

Returns:

an implementation of the interface that checks each access with the PDP

invoke

public Object invoke(Object proxy,
                     Method method,
                     Object[] args)
              throws Throwable

Specified by:

invoke in interface InvocationHandler

Throws:

Throwable