org.globus.gridshib.gt.authorization
Class GS4GT.PushPDPImpl

java.lang.Object
  org.globus.gridshib.gt.authorization.BasePDP
      org.globus.gridshib.gt.authorization.GS4GT.PushPDPImpl

All Implemented Interfaces:

GridShibConfigParams, PDP

Enclosing class:

GS4GT

public static class GS4GT.PushPDPImpl
extends BasePDP
implements GridShibConfigParams

Combined interceptor for GridShib attribute push.

See Also:

BasePDP, GridShibConfigParams

Field Summary

Fields inherited from interface org.globus.gridshib.gt.authorization.GridShibConfigParams

AA_INSTANCE_KEY, ALL_CONFIG_KEYS, ATTR_FILE_KEY, AUTHZ_HOST_KEY, BLACKLIST_IP_ADDRESSES_FILE_KEY, BLACKLIST_NAME_IDS_FILE_KEY, CACHE_KEY, CONSULT_GRIDMAP_KEY, DEFAULT_GRIDMAP, ENABLE_ATTRIBUTE_AUTHZ_KEY, ENABLE_ATTRIBUTE_MAPPING_KEY, ENABLE_ATTRIBUTE_QUERY_KEY, ENABLE_BLACKLISTING_KEY, IDP_PROVIDER_ID_KEY, MAP_FILE_KEY, METADATA_PATH_KEY, RESPECT_KEY, SAML_MAP_POLICY_KEY, SHIB_PDP_POLICY_KEY, SP_PROVIDER_ID_KEY, USE_VOMS

Constructor Summary

GS4GT.PushPDPImpl()

Method Summary

void

initialize(HashMap configs, String name) If a subclass overrides this method (which is almost always the case), it MUST call this method at the end of a successful initialization.

int

isPermitted(Subject peerSubject, javax.xml.rpc.handler.MessageContext context, javax.xml.namespace.QName operation) This PDP implementation orchestrates the following specific workflow: Invoke GS4GT.PrePolicyPDPImpl If PERMIT or DENY, return PERMIT or DENY (resp.); otherwise, continue Invoke SAMLAttributePDPImpl Return SAMLAttributePDPImpl decision If this PDP reaches the end of the authorization chain without returning PERMIT or DENY, it returns whatever SAMLAttributePDPImpl returns.

Methods inherited from class org.globus.gridshib.gt.authorization.BasePDP

isInitialized

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

GS4GT.PushPDPImpl

public GS4GT.PushPDPImpl()

Method Detail

initialize

public void initialize(HashMap configs,
                       String name)
                throws Exception

Description copied from class: BasePDP

If a subclass overrides this method (which is almost always the case), it MUST call this method at the end of a successful initialization.

Specified by:

initialize in interface PDP

Overrides:

initialize in class BasePDP

Throws:

Exception

isPermitted

public int isPermitted(Subject peerSubject,
                       javax.xml.rpc.handler.MessageContext context,
                       javax.xml.namespace.QName operation)
                throws Exception

This PDP implementation orchestrates the following specific workflow:

1. Invoke GS4GT.PrePolicyPDPImpl
   • If PERMIT or DENY, return PERMIT or DENY (resp.); otherwise, continue
2. Invoke SAMLAttributePDPImpl
3. Return SAMLAttributePDPImpl decision

If this PDP reaches the end of the authorization chain without returning PERMIT or DENY, it returns whatever SAMLAttributePDPImpl returns.

Specified by:

isPermitted in interface PDP

Throws:

Exception