Package ru.cg.webbpm.modules.security.api.impl.service

Class AccessLevelServiceImpl

java.lang.Object

ru.cg.webbpm.modules.security.api.impl.service.AccessLevelServiceImpl

All Implemented Interfaces:

AccessLevelService

@Service
public class AccessLevelServiceImpl
extends Object
implements AccessLevelService

Author:

Kochetkov

Constructor Summary

Constructors

Constructor	Description
AccessLevelServiceImpl(SecurityContext securityContext, AccessLevelDao accessLevelDao, UserGroupDao userGroupDao, GroupDao groupDao)	Access level service constructor - creates new access level service.

Method Summary

Modifier and Type	Method	Description
void	checkGroupAccessLevel(Collection<Group> groups)	Checks the current user's access level to the collection of groups.
void	checkGroupAccessLevel(Collection<Group> groups, String userId)	Checks the user's access level to the collection of groups.
void	checkGroupsAccessLevelByIds(Collection<String> groupIds)	Checks the current user's access level to the collection of group ids.
void	checkGroupsAccessLevelByIds(Collection<String> groupIds, String userId)	Checks user's access level to the the collection of groups ids.
AccessLevel	get(String accessLevelId)	Gets access level by access level id.
List<AccessLevel>	get(LoadOptions options)	Gets list of access levels which less than current user access level according to load options.
short	getCurrentUserAccessLevel()	Gets current user's maximal access level.
short	getGroupsAccessLevel(Collection<Group> groups)	Gets maximal access level of groups.
AccessLevel	getMaxAccessLevel()	Gets maximal access level.
String	getMaxAccessLevelId()	Gets id of maximal access level.
AccessLevel	getMinAccessLevel()	Gets minimal access level.
String	getMinAccessLevelId()	Gets id of minimal access level.
short	getUserAccessLevel(String userId)	Gets user's maximal access level by user id.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface ru.cg.webbpm.modules.security.api.service.AccessLevelService

checkGroupAccessLevel, checkGroupAccessLevelById, checkGroupAccessLevelById

Constructor Details

AccessLevelServiceImpl

@Autowired
public AccessLevelServiceImpl(SecurityContext securityContext,
 AccessLevelDao accessLevelDao,
 UserGroupDao userGroupDao,
 GroupDao groupDao)

Access level service constructor - creates new access level service.

Parameters:

securityContext - user's security context. Instance of SecurityContext type.

accessLevelDao - access level data access object. Instance of AccessLevelDao type.

userGroupDao - link user account user group data access object. Instance of UserGroupDao type.

groupDao - user group data access object. Instance of GroupDao type.

Method Details

get

public AccessLevel get(String accessLevelId)

Gets access level by access level id. Access level must be less than current user access level.

Specified by:

get in interface AccessLevelService

Parameters:

accessLevelId - access level id. Instance of String type.

Returns:

requested access level or null if does not exist. Instance of AccessLevel type.

Throws:

AccessDeniedException - if current user access level is less than requested access level.

See Also:

• getCurrentUserAccessLevel()
• AccessLevelDao.getAccessLevel(String)

get

public List<AccessLevel> get(LoadOptions options)

Gets list of access levels which less than current user access level according to load options.

Specified by:

get in interface AccessLevelService

Parameters:

options - indicates load option properties. Instance of LoadOptions type.

Returns:

list of access levels. Instance of List type.

See Also:

• getCurrentUserAccessLevel()
• AccessLevelDao.getLevelsLessThan(LoadOptions, short)

getMinAccessLevelId

public String getMinAccessLevelId()

Gets id of minimal access level.

Specified by:

getMinAccessLevelId in interface AccessLevelService

Returns:

id of minimal access level or null if does not exist. Instance of String type.

See Also:

• AccessLevelDao.getMinAccessLevel()

getMaxAccessLevelId

public String getMaxAccessLevelId()

Gets id of maximal access level.

Specified by:

getMaxAccessLevelId in interface AccessLevelService

Returns:

id of maximal access level or null if does not exist. Instance of String type.

See Also:

• AccessLevelDao.getMaxAccessLevel()

getMinAccessLevel

public AccessLevel getMinAccessLevel()

Gets minimal access level.

Specified by:

getMinAccessLevel in interface AccessLevelService

Returns:

minimal access level or null if does not exist. Instance of AccessLevel type.

See Also:

• AccessLevelDao.getMinAccessLevel()

getMaxAccessLevel

public AccessLevel getMaxAccessLevel()

Gets maximal access level.

Specified by:

getMaxAccessLevel in interface AccessLevelService

Returns:

maximal access level or null if does not exist. Instance of AccessLevel type.

See Also:

• AccessLevelDao.getMaxAccessLevel()

getCurrentUserAccessLevel

public short getCurrentUserAccessLevel()

Gets current user's maximal access level.

Specified by:

getCurrentUserAccessLevel in interface AccessLevelService

Returns:

number value of maximal access level. Instance of short type.

See Also:

• SecurityContext.getCurrentUserAccountId()
• getUserAccessLevel(String)

getUserAccessLevel

public short getUserAccessLevel(String userId)

Gets user's maximal access level by user id.

Specified by:

getUserAccessLevel in interface AccessLevelService

Parameters:

userId - user account id. Instance of String type.

Returns:

number value of maximal access level or Short.MIN_VALUE. Instance of short type.

See Also:

• UserGroupDao.getUserGroupsByUserId(LoadOptions, String)
• getGroupsAccessLevel(Collection)

getGroupsAccessLevel

public short getGroupsAccessLevel(Collection<Group> groups)

Gets maximal access level of groups.

Specified by:

getGroupsAccessLevel in interface AccessLevelService

Parameters:

groups - collection of groups. Instance of Collection type.

Returns:

number value of maximal access level or Short.MIN_VALUE. Instance of short type.

checkGroupsAccessLevelByIds

public void checkGroupsAccessLevelByIds(Collection<String> groupIds)

Checks the current user's access level to the collection of group ids.

Specified by:

checkGroupsAccessLevelByIds in interface AccessLevelService

Parameters:

groupIds - collection of group ids. Instance of Collection type.

See Also:

• GroupDao.getGroups(Collection)
• checkGroupAccessLevel(Collection)

checkGroupsAccessLevelByIds

public void checkGroupsAccessLevelByIds(Collection<String> groupIds,
 String userId)

Checks user's access level to the the collection of groups ids.

Specified by:

checkGroupsAccessLevelByIds in interface AccessLevelService

Parameters:

groupIds - collection group ids. Instance of Collection type.

userId - user account id. Instance of String type.

See Also:

• GroupDao.getGroups(Collection)
• checkGroupAccessLevel(Collection, String)

checkGroupAccessLevel

public void checkGroupAccessLevel(Collection<Group> groups)

Checks the current user's access level to the collection of groups.

Specified by:

checkGroupAccessLevel in interface AccessLevelService

Parameters:

groups - collection of groups. Instance of Collection type.

See Also:

• SecurityContext.getCurrentUserAccountId()
• checkGroupAccessLevel(Collection, String)

checkGroupAccessLevel

public void checkGroupAccessLevel(Collection<Group> groups,
 String userId)

Checks the user's access level to the collection of groups.

Specified by:

checkGroupAccessLevel in interface AccessLevelService

Parameters:

groups - collection of groups. Instance of Collection type.

userId - user's id. Instance of String type.

Throws:

AccessDeniedException - if user access level is less than groups access level.

See Also:

• getGroupsAccessLevel(Collection)
• getUserAccessLevel(String)