Method Detail

• public boolean disableAuthz()

  Disable authorization checks for the current ExecutionContext only. This should be used when the system automatically does something (possible based on a user action) that the user would not generally have permission to do themselves.

  Returns:

  boolean representing previous state of disable authorization (true if was disabled, false if not). If this is true, you should not enableAuthz when you are done and instead allow whichever code first did the disable to enable it.

• public boolean disableEntityEca()

  Disable Entity Facade ECA rules (for this thread/ExecutionContext only, does not affect other things happening in the system).

  Returns:

  boolean following same pattern as disableAuthz(), and should be handled the same way.

• public boolean disableTarpit()

• public void enableAuthz()

  Enable authorization after a disableAuthz() call. Not that this should be done in a finally block with the code following the disableAuthz() in the corresponding try block. If this is not in a finally block an exception may result in authorizations being disabled for the rest of the scope of the ExecutionContext (a potential security whole).

• public void enableEntityEca()

  Disable Entity Facade ECA rules (for this thread/ExecutionContext only, does not affect other things happening in the system).

• public void enableTarpit()

• public java.util.List<ArtifactExecutionInfo> getHistory()

• public java.util.Deque<ArtifactExecutionInfo> getStack()

  Gets a stack/deque/list of objects representing artifacts that have been executed to get to the current artifact. The bottom artifact in the stack will generally be a screen or a service. If a service is run locally this will trace back to the screen or service that called it, and if a service was called remotely it will be the bottom of the stack.

  Returns:

  Actual ArtifactExecutionInfo stack/deque object

• public ArtifactExecutionInfo peek()

  Gets information about the current artifact being executed, and about authentication and authorization for that artifact.

  Returns:

  Current (most recent) ArtifactExecutionInfo

• public ArtifactExecutionInfo pop(ArtifactExecutionInfo aei)

  Pop from the artifact stack and verify it is the same artifact name and type. This is generally called internally by the framework and does not need to be used in application code.

• public java.lang.String printHistory()

• public void push(ArtifactExecutionInfo aei, boolean requiresAuthz)

  Push onto the artifact stack. This is generally called internally by the framework and does not need to be used in application code.

• public ArtifactExecutionInfo push(java.lang.String name, ArtifactType typeEnum, AuthzAction actionEnum, boolean requiresAuthz)

• public void setAnonymousAuthorizedAll()

• public void setAnonymousAuthorizedView()