org.apache.directory.server.core.admin

Class AdministrativePointInterceptor

java.lang.Object

org.apache.directory.server.core.api.interceptor.BaseInterceptor

org.apache.directory.server.core.admin.AdministrativePointInterceptor

All Implemented Interfaces:

org.apache.directory.server.core.api.interceptor.Interceptor

public class AdministrativePointInterceptor
extends org.apache.directory.server.core.api.interceptor.BaseInterceptor

An interceptor to manage the Administrative model

Author:

Apache Directory Project

Field Summary

Fields inherited from class org.apache.directory.server.core.api.interceptor.BaseInterceptor

ACCESS_CONTROL_SUBENTRIES_AT, ADMINISTRATIVE_ROLE_AT, COLLECTIVE_ATTRIBUTE_SUBENTRIES_AT, COLLECTIVE_EXCLUSIONS_AT, CREATE_TIMESTAMP_AT, CREATORS_NAME_AT, directoryService, dnFactory, ENTRY_ACI_AT, ENTRY_CSN_AT, ENTRY_DN_AT, ENTRY_UUID_AT, MODIFIERS_NAME_AT, MODIFY_TIMESTAMP_AT, OBJECT_CLASS_AT, PWD_POLICY_STATE_ATTRIBUTE_TYPES, schemaManager, SUBENTRY_ACI_AT, SUBSCHEMA_SUBENTRY_AT, SUBTREE_SPECIFICATION_AT, TRIGGER_EXECUTION_SUBENTRIES_AT, UNIQUE_MEMBER_AT, USER_PASSWORD_AT

Constructor Summary

Constructors

Constructor and Description
AdministrativePointInterceptor() Creates a new instance of a AdministrativePointInterceptor.

Method Summary

Methods

Modifier and Type	Method and Description
void	add(org.apache.directory.server.core.api.interceptor.context.AddOperationContext addContext) Add an administrative point into the DIT.
void	delete(org.apache.directory.server.core.api.interceptor.context.DeleteOperationContext deleteContext) We have to check that we can remove the associated AdministrativePoint : if we remove an AAP, no descendant IAP should remain orphan If we remove a SAP, no descendant IAP should remain orphan
void	destroy()
void	init(org.apache.directory.server.core.api.DirectoryService directoryService) Registers and initializes all Authenticators to this service.
void	lockRead() Get a read-lock on the AP cache.
void	lockWrite() Get a write-lock on the AP cache.
void	modify(org.apache.directory.server.core.api.interceptor.context.ModifyOperationContext modifyContext) Only the add and remove modifications are fully supported.
void	move(org.apache.directory.server.core.api.interceptor.context.MoveOperationContext moveContext)
void	moveAndRename(org.apache.directory.server.core.api.interceptor.context.MoveAndRenameOperationContext moveAndRenameContext)
void	rename(org.apache.directory.server.core.api.interceptor.context.RenameOperationContext renameContext)
void	unlock() Release the read-write lock on the AP cache.

Methods inherited from class org.apache.directory.server.core.api.interceptor.BaseInterceptor

bind, compare, getName, getNextInterceptor, getPrincipal, getRootDse, hasEntry, lookup, next, next, next, next, next, next, next, next, next, next, next, next, next, search, unbind

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AdministrativePointInterceptor

public AdministrativePointInterceptor()

Creates a new instance of a AdministrativePointInterceptor.

Method Detail

lockRead

public void lockRead()

Get a read-lock on the AP cache. No read operation can be done on the AP cache if this method is not called before.

lockWrite

public void lockWrite()

Get a write-lock on the AP cache. No write operation can be done on the apCache if this method is not called before.

unlock

public void unlock()

Release the read-write lock on the AP cache. This method must be called after having read or modified the AP cache

init

public void init(org.apache.directory.server.core.api.DirectoryService directoryService)
          throws org.apache.directory.api.ldap.model.exception.LdapException

Registers and initializes all Authenticators to this service.

Specified by:

init in interface org.apache.directory.server.core.api.interceptor.Interceptor

Overrides:

init in class org.apache.directory.server.core.api.interceptor.BaseInterceptor

Throws:

org.apache.directory.api.ldap.model.exception.LdapException

destroy

public void destroy()

Specified by:

destroy in interface org.apache.directory.server.core.api.interceptor.Interceptor

Overrides:

destroy in class org.apache.directory.server.core.api.interceptor.BaseInterceptor

add

public void add(org.apache.directory.server.core.api.interceptor.context.AddOperationContext addContext)
         throws org.apache.directory.api.ldap.model.exception.LdapException

Add an administrative point into the DIT. We have to deal with some specific cases :

• If it's an AA, then the added role should be the only one
• It's not possible to add IA and SA at the same time

Specified by:

add in interface org.apache.directory.server.core.api.interceptor.Interceptor

Overrides:

add in class org.apache.directory.server.core.api.interceptor.BaseInterceptor

Parameters:

addContext - The AddOperationContext instance

Throws:

org.apache.directory.api.ldap.model.exception.LdapException - If we had some error while processing the Add operation

delete

public void delete(org.apache.directory.server.core.api.interceptor.context.DeleteOperationContext deleteContext)
            throws org.apache.directory.api.ldap.model.exception.LdapException

We have to check that we can remove the associated AdministrativePoint :

• if we remove an AAP, no descendant IAP should remain orphan
• If we remove a SAP, no descendant IAP should remain orphan

Specified by:

delete in interface org.apache.directory.server.core.api.interceptor.Interceptor

Overrides:

delete in class org.apache.directory.server.core.api.interceptor.BaseInterceptor

Throws:

org.apache.directory.api.ldap.model.exception.LdapException

modify

public void modify(org.apache.directory.server.core.api.interceptor.context.ModifyOperationContext modifyContext)
            throws org.apache.directory.api.ldap.model.exception.LdapException

Only the add and remove modifications are fully supported. We have to check that the underlying APs are still consistent. We first have to compute the final AdministrativeRole, then do a diff with the initial attribute, to determinate which roles have been added and which ones have been deleted. Once this is done, we have to check that when deleting or adding each of those roles the admin model remains consistent.

Specified by:

modify in interface org.apache.directory.server.core.api.interceptor.Interceptor

Overrides:

modify in class org.apache.directory.server.core.api.interceptor.BaseInterceptor

Throws:

org.apache.directory.api.ldap.model.exception.LdapException

move

public void move(org.apache.directory.server.core.api.interceptor.context.MoveOperationContext moveContext)
          throws org.apache.directory.api.ldap.model.exception.LdapException

Specified by:

move in interface org.apache.directory.server.core.api.interceptor.Interceptor

Overrides:

move in class org.apache.directory.server.core.api.interceptor.BaseInterceptor

Throws:

org.apache.directory.api.ldap.model.exception.LdapException

moveAndRename

public void moveAndRename(org.apache.directory.server.core.api.interceptor.context.MoveAndRenameOperationContext moveAndRenameContext)
                   throws org.apache.directory.api.ldap.model.exception.LdapException

Specified by:

moveAndRename in interface org.apache.directory.server.core.api.interceptor.Interceptor

Overrides:

moveAndRename in class org.apache.directory.server.core.api.interceptor.BaseInterceptor

Throws:

org.apache.directory.api.ldap.model.exception.LdapException

rename

public void rename(org.apache.directory.server.core.api.interceptor.context.RenameOperationContext renameContext)
            throws org.apache.directory.api.ldap.model.exception.LdapException

Specified by:

rename in interface org.apache.directory.server.core.api.interceptor.Interceptor

Overrides:

rename in class org.apache.directory.server.core.api.interceptor.BaseInterceptor

Throws:

org.apache.directory.api.ldap.model.exception.LdapException