Class StrictRoleCheckPolicy

  • All Implemented Interfaces:
    RoleCheckPolicy

    public class StrictRoleCheckPolicy
    extends Object
    implements RoleCheckPolicy
    StrictRoleCheckPolicy

    Enforces that if a runAsRole is present, then the role to check must be the same as that runAsRole and the set of static roles is ignored.

    • Constructor Detail

      • StrictRoleCheckPolicy

        public StrictRoleCheckPolicy()
    • Method Detail

      • checkRole

        public boolean checkRole​(String roleName,
                                 Principal runAsRole,
                                 Group roles)
        Description copied from interface: RoleCheckPolicy
        Check if a role is either a runAsRole or in a set of roles
        Specified by:
        checkRole in interface RoleCheckPolicy
        Parameters:
        roleName - the role to check
        runAsRole - a pushed role (can be null)
        roles - a Group whose Principals are role names
        Returns:
        true if role equals runAsRole or is a member of roles.