A C D E F G H I L M O R S T

A

ACDFEngine - Class in org.apache.directory.server.core.authz.support

An implementation of Access Control Decision Function (18.8, X.501).

ACDFEngine(SchemaManager) - Constructor for class org.apache.directory.server.core.authz.support.ACDFEngine

Creates a new instance.

ACI_LOG - Static variable in interface org.apache.directory.server.core.authz.support.ACITupleFilter

the dedicated logger for ACI

AciAuthorizationInterceptor - Class in org.apache.directory.server.core.authz

An ACI based authorization service.

AciAuthorizationInterceptor() - Constructor for class org.apache.directory.server.core.authz.AciAuthorizationInterceptor

Create a AciAuthorizationInterceptor instance

AciContext - Class in org.apache.directory.server.core.authz.support

A container used to pass parameters to the ACDF engine

AciContext(SchemaManager, OperationContext) - Constructor for class org.apache.directory.server.core.authz.support.AciContext

Creates a new instance of AciContext.

ACITupleFilter - Interface in org.apache.directory.server.core.authz.support

An interface that filters the specified collection of tuples using the specified extra information.

add(AddOperationContext) - Method in class org.apache.directory.server.core.authz.AciAuthorizationInterceptor

ATTRIBUTE_TYPE - Static variable in class org.apache.directory.server.core.authz.support.OperationScope

An operation that affects all values in an attribute type.

ATTRIBUTE_TYPE_AND_VALUE - Static variable in class org.apache.directory.server.core.authz.support.OperationScope

An operation that affects the specific value in an attribute type.

C

cacheNewGroup(Dn, Entry) - Method in class org.apache.directory.server.core.authz.AciAuthorizationInterceptor

checkPermission(AciContext) - Method in class org.apache.directory.server.core.authz.support.ACDFEngine

Checks the user with the specified name can access the specified resource (entry, attribute type, or attribute value) and throws LdapNoPermissionException if the user doesn't have any permission to perform the specified grants.

compare(CompareOperationContext) - Method in class org.apache.directory.server.core.authz.AciAuthorizationInterceptor

D

DEFAULT_SEARCH_CONTROLS - Static variable in class org.apache.directory.server.core.authz.AciAuthorizationInterceptor

DefaultAuthorizationInterceptor - Class in org.apache.directory.server.core.authz

An Interceptor that controls access to DefaultPartitionNexus.

DefaultAuthorizationInterceptor() - Constructor for class org.apache.directory.server.core.authz.DefaultAuthorizationInterceptor

Creates a new instance of DefaultAuthorizationInterceptor.

delete(DeleteOperationContext) - Method in class org.apache.directory.server.core.authz.AciAuthorizationInterceptor

delete(DeleteOperationContext) - Method in class org.apache.directory.server.core.authz.DefaultAuthorizationInterceptor

E

ENTRY - Static variable in class org.apache.directory.server.core.authz.support.OperationScope

An operation that affects the whole entry.

F

filter(AciContext, OperationScope, Entry) - Method in interface org.apache.directory.server.core.authz.support.ACITupleFilter

Returns the collection of the filtered tuples using the specified extra information.

filter(AciContext, OperationScope, Entry) - Method in class org.apache.directory.server.core.authz.support.HighestPrecedenceFilter

filter(AciContext, OperationScope, Entry) - Method in class org.apache.directory.server.core.authz.support.MaxImmSubFilter

filter(AciContext, OperationScope, Entry) - Method in class org.apache.directory.server.core.authz.support.MaxValueCountFilter

filter(AciContext, OperationScope, Entry) - Method in class org.apache.directory.server.core.authz.support.MicroOperationFilter

filter(AciContext, OperationScope, Entry) - Method in class org.apache.directory.server.core.authz.support.MostSpecificProtectedItemFilter

filter(AciContext, OperationScope, Entry) - Method in class org.apache.directory.server.core.authz.support.MostSpecificUserClassFilter

filter(AciContext, OperationScope, Entry) - Method in class org.apache.directory.server.core.authz.support.RelatedProtectedItemFilter

filter(AciContext, OperationScope, Entry) - Method in class org.apache.directory.server.core.authz.support.RelatedUserClassFilter

filter(AciContext, OperationScope, Entry) - Method in class org.apache.directory.server.core.authz.support.RestrictedByFilter

G

getAciTuples() - Method in class org.apache.directory.server.core.authz.support.AciContext

getACITuples(String) - Method in class org.apache.directory.server.core.authz.TupleCache

getAttributeType() - Method in class org.apache.directory.server.core.authz.support.AciContext

getAttrValue() - Method in class org.apache.directory.server.core.authz.support.AciContext

getAuthenticationLevel() - Method in class org.apache.directory.server.core.authz.support.AciContext

getEntry() - Method in class org.apache.directory.server.core.authz.support.AciContext

getEntryDn() - Method in class org.apache.directory.server.core.authz.support.AciContext

getEntryView() - Method in class org.apache.directory.server.core.authz.support.AciContext

getGroups(String) - Method in class org.apache.directory.server.core.authz.GroupCache

Gets the set of groups a user is a member of.

getMicroOperations() - Method in class org.apache.directory.server.core.authz.support.AciContext

getName() - Method in class org.apache.directory.server.core.authz.support.OperationScope

Return the name of this scope.

getOperationContext() - Method in class org.apache.directory.server.core.authz.support.AciContext

getSchemaManager() - Method in class org.apache.directory.server.core.authz.support.AciContext

getUserDn() - Method in class org.apache.directory.server.core.authz.support.AciContext

getUserGroupNames() - Method in class org.apache.directory.server.core.authz.support.AciContext

groupAdded(Dn, Entry) - Method in class org.apache.directory.server.core.authz.GroupCache

Adds a groups members to the cache.

GroupCache - Class in org.apache.directory.server.core.authz

A cache for tracking static group membership.

GroupCache(DirectoryService) - Constructor for class org.apache.directory.server.core.authz.GroupCache

Creates a static group cache.

groupDeleted(Dn, Entry) - Method in class org.apache.directory.server.core.authz.GroupCache

Deletes a group's members from the cache.

groupModified(Dn, List<Modification>, Entry, SchemaManager) - Method in class org.apache.directory.server.core.authz.GroupCache

Modifies the cache to reflect changes via modify operations to the group entries.

groupModified(Dn, ModificationOperation, Entry) - Method in class org.apache.directory.server.core.authz.GroupCache

Modifies the cache to reflect changes via modify operations to the group entries.

groupRenamed(Dn, Dn) - Method in class org.apache.directory.server.core.authz.GroupCache

H

hasEntry(HasEntryOperationContext) - Method in class org.apache.directory.server.core.authz.AciAuthorizationInterceptor

hasPermission(AciContext) - Method in class org.apache.directory.server.core.authz.support.ACDFEngine

Returns true if the user with the specified name can access the specified resource (entry, attribute type, or attribute value) and throws LdapNoPermissionException if the user doesn't have any permission to perform the specified grants.

HighestPrecedenceFilter - Class in org.apache.directory.server.core.authz.support

An ACITupleFilter that discards all tuples having a precedence less than the highest remaining precedence.

HighestPrecedenceFilter() - Constructor for class org.apache.directory.server.core.authz.support.HighestPrecedenceFilter

I

init(DirectoryService) - Method in class org.apache.directory.server.core.authz.AciAuthorizationInterceptor

Initializes this interceptor based service by getting a handle on the nexus, setting up the tuple and group membership caches, the ACIItem parser and the ACDF engine.

init(DirectoryService) - Method in class org.apache.directory.server.core.authz.DefaultAuthorizationInterceptor

isPrincipalAnAdministrator(Dn) - Method in class org.apache.directory.server.core.authz.AciAuthorizationInterceptor

isPrincipalAnAdministrator(Dn) - Method in class org.apache.directory.server.core.authz.GroupCache

An optimization.

isRemovable(ACITuple, AttributeType, Value<?>, Entry) - Method in class org.apache.directory.server.core.authz.support.RestrictedByFilter

L

lookup(LookupOperationContext) - Method in class org.apache.directory.server.core.authz.AciAuthorizationInterceptor

lookup(LookupOperationContext) - Method in class org.apache.directory.server.core.authz.DefaultAuthorizationInterceptor

M

MaxImmSubFilter - Class in org.apache.directory.server.core.authz.support

An ACITupleFilter that discards all tuples that doesn't satisfy MaxImmSubItem constraint if available.

MaxImmSubFilter(SchemaManager) - Constructor for class org.apache.directory.server.core.authz.support.MaxImmSubFilter

MaxValueCountFilter - Class in org.apache.directory.server.core.authz.support

An ACITupleFilter that discards all tuples that doesn't satisfy MaxValueCountItem constraint if available.

MaxValueCountFilter() - Constructor for class org.apache.directory.server.core.authz.support.MaxValueCountFilter

MicroOperationFilter - Class in org.apache.directory.server.core.authz.support

An ACITupleFilter that discard tuples which doesn't contain any related MicroOperations.

MicroOperationFilter() - Constructor for class org.apache.directory.server.core.authz.support.MicroOperationFilter

modify(ModifyOperationContext) - Method in class org.apache.directory.server.core.authz.AciAuthorizationInterceptor

modify(ModifyOperationContext) - Method in class org.apache.directory.server.core.authz.DefaultAuthorizationInterceptor

MostSpecificProtectedItemFilter - Class in org.apache.directory.server.core.authz.support

An ACITupleFilter that chooses the tuples with the most specific protected item.

MostSpecificProtectedItemFilter() - Constructor for class org.apache.directory.server.core.authz.support.MostSpecificProtectedItemFilter

MostSpecificUserClassFilter - Class in org.apache.directory.server.core.authz.support

An ACITupleFilter that chooses the tuples with the most specific user class.

MostSpecificUserClassFilter() - Constructor for class org.apache.directory.server.core.authz.support.MostSpecificUserClassFilter

move(MoveOperationContext) - Method in class org.apache.directory.server.core.authz.AciAuthorizationInterceptor

move(MoveOperationContext) - Method in class org.apache.directory.server.core.authz.DefaultAuthorizationInterceptor

moveAndRename(MoveAndRenameOperationContext) - Method in class org.apache.directory.server.core.authz.AciAuthorizationInterceptor

moveAndRename(MoveAndRenameOperationContext) - Method in class org.apache.directory.server.core.authz.DefaultAuthorizationInterceptor

O

OperationScope - Class in org.apache.directory.server.core.authz.support

An enumeration that represents the scope of user operation.

org.apache.directory.server.core.authz - package org.apache.directory.server.core.authz

org.apache.directory.server.core.authz.support - package org.apache.directory.server.core.authz.support

R

RelatedProtectedItemFilter - Class in org.apache.directory.server.core.authz.support

An ACITupleFilter that discards all tuples whose ProtectedItems are not related with the operation.

RelatedProtectedItemFilter(RefinementEvaluator, Evaluator, SchemaManager) - Constructor for class org.apache.directory.server.core.authz.support.RelatedProtectedItemFilter

RelatedUserClassFilter - Class in org.apache.directory.server.core.authz.support

An ACITupleFilter that discards all tuples whose UserClasses are not related with the current user.

RelatedUserClassFilter(SubtreeEvaluator) - Constructor for class org.apache.directory.server.core.authz.support.RelatedUserClassFilter

rename(RenameOperationContext) - Method in class org.apache.directory.server.core.authz.AciAuthorizationInterceptor

rename(RenameOperationContext) - Method in class org.apache.directory.server.core.authz.DefaultAuthorizationInterceptor

RestrictedByFilter - Class in org.apache.directory.server.core.authz.support

An ACITupleFilter that discards all tuples that doesn't satisfy RestrictedByItem constraint if available.

RestrictedByFilter() - Constructor for class org.apache.directory.server.core.authz.support.RestrictedByFilter

S

search(SearchOperationContext) - Method in class org.apache.directory.server.core.authz.AciAuthorizationInterceptor

search(SearchOperationContext) - Method in class org.apache.directory.server.core.authz.DefaultAuthorizationInterceptor

setAciTuples(Collection<ACITuple>) - Method in class org.apache.directory.server.core.authz.support.AciContext

setAttributeType(AttributeType) - Method in class org.apache.directory.server.core.authz.support.AciContext

setAttrValue(Value<?>) - Method in class org.apache.directory.server.core.authz.support.AciContext

setAuthenticationLevel(AuthenticationLevel) - Method in class org.apache.directory.server.core.authz.support.AciContext

setEntry(Entry) - Method in class org.apache.directory.server.core.authz.support.AciContext

setEntryDn(Dn) - Method in class org.apache.directory.server.core.authz.support.AciContext

setEntryView(Entry) - Method in class org.apache.directory.server.core.authz.support.AciContext

setMicroOperations(Collection<MicroOperation>) - Method in class org.apache.directory.server.core.authz.support.AciContext

setOperationContext(OperationContext) - Method in class org.apache.directory.server.core.authz.support.AciContext

setSchemaManager(SchemaManager) - Method in class org.apache.directory.server.core.authz.support.AciContext

setUserDn(Dn) - Method in class org.apache.directory.server.core.authz.support.AciContext

setUserGroupNames(Collection<Dn>) - Method in class org.apache.directory.server.core.authz.support.AciContext

subentryAdded(Dn, Entry) - Method in class org.apache.directory.server.core.authz.TupleCache

subentryDeleted(Dn, Entry) - Method in class org.apache.directory.server.core.authz.TupleCache

subentryModified(Dn, List<Modification>, Entry) - Method in class org.apache.directory.server.core.authz.TupleCache

subentryModified(Dn, Entry, Entry) - Method in class org.apache.directory.server.core.authz.TupleCache

subentryRenamed(Dn, Dn) - Method in class org.apache.directory.server.core.authz.TupleCache

T

toString() - Method in class org.apache.directory.server.core.authz.support.OperationScope

Returns the name of this scope.

TupleCache - Class in org.apache.directory.server.core.authz

A cache for tuple sets which responds to specific events to perform cache house keeping as access control subentries are added, deleted and modified.

TupleCache(CoreSession) - Constructor for class org.apache.directory.server.core.authz.TupleCache

Creates a ACITuple cache.

A C D E F G H I L M O R S T