Package com.flowable.platform.security.permission

Class CasePermissionServiceImpl

java.lang.Object

com.flowable.platform.security.service.AbstractPlatformSecurityService

com.flowable.platform.security.permission.CasePermissionServiceImpl

All Implemented Interfaces:

CasePermissionService, PermissionService, PermissionServiceRegistryAware, org.springframework.beans.factory.Aware

@Transactional
public class CasePermissionServiceImpl
extends AbstractPlatformSecurityService
implements CasePermissionService

Field Summary

Fields

Modifier and Type	Field	Description
protected org.flowable.cmmn.engine.CmmnEngineConfiguration	cmmnEngineConfiguration
protected org.flowable.cmmn.api.CmmnHistoryService	cmmnHistoryService

Fields inherited from class com.flowable.platform.security.service.AbstractPlatformSecurityService

additionalAdminUsers, CASE_PREFIX, cmmnRepositoryService, cmmnRuntimeService, cmmnTaskService, defaultSecurityPolicyKey, defaultSecurityPolicyModel, inspectEnabled, permissionServiceRegistry, platformSecurityInterceptor, policyRepositoryService, PROCESS_PREFIX, repositoryService, runtimeService, SECURITY_POLICY_MODEL, TASK_PREFIX, taskService

Constructor Summary

Constructors

Constructor	Description
CasePermissionServiceImpl()

Method Summary

Modifier and Type	Method	Description
protected boolean	checkPermissionInCaseParent(java.lang.String casePermission, SecurityPolicyModel securityPolicyModel)
java.util.List<java.lang.String>	fetchPermissionsForHistoricScope(java.lang.String scopeId, boolean checkWritePermissionInParent, java.lang.String userId, java.util.Set<java.lang.String> groupKeys, java.lang.String tenantId)
java.util.List<java.lang.String>	fetchPermissionsForHistoricScope(java.lang.String scopeId, java.lang.String userId, java.util.Set<java.lang.String> groupKeys, java.lang.String tenantId)
java.util.List<java.lang.String>	fetchPermissionsForRuntimeScope(java.lang.String scopeId, boolean checkWritePermissionInParent, java.lang.String userId, java.util.Set<java.lang.String> groupKeys, java.lang.String tenantId)
java.util.List<java.lang.String>	fetchPermissionsForRuntimeScope(java.lang.String scopeId, java.lang.String userId, java.util.Set<java.lang.String> groupKeys, java.lang.String tenantId)
protected org.flowable.cmmn.api.repository.CaseDefinition	findCaseDefinition(java.lang.String caseDefinitionId, java.lang.String caseDefinitionKey, java.lang.String tenantId)
org.flowable.cmmn.api.runtime.CaseInstance	getCaseInstance(java.lang.String caseInstanceId, java.lang.String tenantId)
org.flowable.cmmn.api.history.HistoricCaseInstance	getHistoricCaseInstance(java.lang.String caseInstanceId, java.lang.String tenantId)
java.util.List<java.lang.String>	getHistoricCasePermissions(java.lang.String caseInstanceId, java.lang.String definitionId, java.util.List<? extends org.flowable.identitylink.api.IdentityLinkInfo> identityLinks, java.lang.String tenantId)
java.util.List<java.lang.String>	getRuntimeCasePermissions(java.lang.String caseInstanceId, java.lang.String definitionId, java.util.List<? extends org.flowable.identitylink.api.IdentityLinkInfo> identityLinks, java.lang.String tenantId)
java.lang.String	getScopeType()	The scope type that this permissions service supports.
protected SecurityPolicyModel	getSecurityModel(java.lang.String caseDefinitionId, java.lang.String tenantId)
protected boolean	hasPermission(java.lang.String permission, java.lang.String startUserId, java.util.List<? extends org.flowable.identitylink.api.IdentityLinkInfo> identityLinks, SecurityPolicyModel securityPolicyModel)
protected boolean	hasPermissionForCaseInstance(java.lang.String permission, java.lang.String caseInstanceId, boolean isHistoricInstance, java.lang.String startUserId, java.util.List<? extends org.flowable.identitylink.api.IdentityLinkInfo> identityLinks, java.lang.String caseDefinitionId, java.lang.String userId, java.util.Set<java.lang.String> groupKeys, java.lang.String tenantId)
boolean	hasPermissionForCaseInstance(java.lang.String permission, org.flowable.cmmn.api.runtime.CaseInstance caseInstance, java.lang.String userId, java.util.Set<java.lang.String> groupKeys, java.lang.String tenantId)
boolean	hasPermissionForHistoricCaseInstance(java.lang.String permission, org.flowable.cmmn.api.history.HistoricCaseInstance caseInstance, java.lang.String userId, java.util.Set<java.lang.String> groupKeys, java.lang.String tenantId)
boolean	hasPermissionForHistoricScope(java.lang.String permission, java.lang.String scopeId, java.lang.String userId, java.util.Set<java.lang.String> groupKeys, java.lang.String tenantId)
boolean	hasPermissionForRuntimeScope(java.lang.String permission, java.lang.String scopeId, java.lang.String userId, java.util.Set<java.lang.String> groupKeys, java.lang.String tenantId)
boolean	hasPermissionForScope(java.lang.String permission, java.lang.String scopeId, java.lang.String userId, java.util.Set<java.lang.String> groupKeys, java.lang.String tenantId)
boolean	hasReadPermissionOnScopeDefinition(java.lang.String scopeDefinitionId, java.lang.String scopeDefinitionKey, java.lang.String userId, java.util.Set<java.lang.String> groupKeys, java.lang.String tenantId)
protected java.util.List<java.lang.String>	translateParentPermissions(java.util.List<java.lang.String> parentPermissions, java.lang.String scopeType)
void	validatePermissionForCaseInstance(java.lang.String permission, org.flowable.cmmn.api.runtime.CaseInstance caseInstance, java.lang.String userId, java.util.Set<java.lang.String> groupKeys, java.lang.String tenantId)
void	validatePermissionForHistoricCaseInstance(java.lang.String permission, org.flowable.cmmn.api.history.HistoricCaseInstance caseInstance, java.lang.String userId, java.util.Set<java.lang.String> groupKeys, java.lang.String tenantId)

Methods inherited from class com.flowable.platform.security.service.AbstractPlatformSecurityService

currentUserHasAdminRights, currentUserIsSuperAdmin, fetchCasePermissionMappings, fetchCasePermissionMappings, fetchCaseSecurityPolicyModel, fetchPermissions, fetchPermissionsForTask, fetchProcessPermissionMappings, fetchProcessPermissionMappings, fetchProcessSecurityPolicyModel, fetchSecurityPolicyModel, fetchSecurityPolicyModel, fetchSecurityPolicyModelForCaseInstance, fetchSecurityPolicyModelForProcessInstance, fetchSecurityPolicyModelForTask, fetchSecurityPolicyModelForTask, fetchTaskPermissionMappings, fetchTaskPermissionMappings, fetchTaskPermissionMappings, fetchTaskPermissionMappingsForCase, fetchTaskPermissionMappingsForProcess, fetchTaskSecurityPolicyModelForCase, fetchTaskSecurityPolicyModelForProcess, filterPermissionsForRole, getCmmnExtensionElementValue, getCurrentGroupKeys, getCurrentTenantId, getCurrentUserId, getDefaultSecurityPolicyModel, getExtensionElementValue, getSecurityPolicyModelByKey, groupOrUserMatches, groupOrUserMatches, hasAnyMatchingIdentityLink, hasAssigneeOrOwnerIdentityLink, hasPermissionForEntityLinks, hasPermissionForHistoricEntityLinks, setPermissionServiceRegistry, translatePermissionForScope

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface com.flowable.platform.security.permission.PermissionService

validatePermissionForHistoricScope, validatePermissionForRuntimeScope, validatePermissionForScope, validatePermissionsForHistoricScope, validatePermissionsForRuntimeScope, validateReadPermissionOnScopeDefinition

Field Details

cmmnHistoryService

@Autowired(required=false) protected org.flowable.cmmn.api.CmmnHistoryService cmmnHistoryService

cmmnEngineConfiguration

@Autowired protected org.flowable.cmmn.engine.CmmnEngineConfiguration cmmnEngineConfiguration

Constructor Details

CasePermissionServiceImpl

public CasePermissionServiceImpl()

Method Details

getScopeType

public java.lang.String getScopeType()

Description copied from interface: PermissionService

The scope type that this permissions service supports.

Specified by:

getScopeType in interface PermissionService

hasPermissionForScope

public boolean hasPermissionForScope(java.lang.String permission, java.lang.String scopeId, java.lang.String userId, java.util.Set<java.lang.String> groupKeys, java.lang.String tenantId)

Specified by:

hasPermissionForScope in interface PermissionService

validatePermissionForCaseInstance

public void validatePermissionForCaseInstance(java.lang.String permission, org.flowable.cmmn.api.runtime.CaseInstance caseInstance, java.lang.String userId, java.util.Set<java.lang.String> groupKeys, java.lang.String tenantId)

Specified by:

validatePermissionForCaseInstance in interface CasePermissionService

hasPermissionForCaseInstance

public boolean hasPermissionForCaseInstance(java.lang.String permission, org.flowable.cmmn.api.runtime.CaseInstance caseInstance, java.lang.String userId, java.util.Set<java.lang.String> groupKeys, java.lang.String tenantId)

Specified by:

hasPermissionForCaseInstance in interface CasePermissionService

validatePermissionForHistoricCaseInstance

public void validatePermissionForHistoricCaseInstance(java.lang.String permission, org.flowable.cmmn.api.history.HistoricCaseInstance caseInstance, java.lang.String userId, java.util.Set<java.lang.String> groupKeys, java.lang.String tenantId)

Specified by:

validatePermissionForHistoricCaseInstance in interface CasePermissionService

hasPermissionForHistoricCaseInstance

public boolean hasPermissionForHistoricCaseInstance(java.lang.String permission, org.flowable.cmmn.api.history.HistoricCaseInstance caseInstance, java.lang.String userId, java.util.Set<java.lang.String> groupKeys, java.lang.String tenantId)

Specified by:

hasPermissionForHistoricCaseInstance in interface CasePermissionService

hasPermissionForRuntimeScope

public boolean hasPermissionForRuntimeScope(java.lang.String permission, java.lang.String scopeId, java.lang.String userId, java.util.Set<java.lang.String> groupKeys, java.lang.String tenantId)

Specified by:

hasPermissionForRuntimeScope in interface PermissionService

fetchPermissionsForRuntimeScope

public java.util.List<java.lang.String> fetchPermissionsForRuntimeScope(java.lang.String scopeId, java.lang.String userId, java.util.Set<java.lang.String> groupKeys, java.lang.String tenantId)

Specified by:

fetchPermissionsForRuntimeScope in interface PermissionService

fetchPermissionsForRuntimeScope

public java.util.List<java.lang.String> fetchPermissionsForRuntimeScope(java.lang.String scopeId, boolean checkWritePermissionInParent, java.lang.String userId, java.util.Set<java.lang.String> groupKeys, java.lang.String tenantId)

Specified by:

fetchPermissionsForRuntimeScope in interface PermissionService

hasPermissionForHistoricScope

public boolean hasPermissionForHistoricScope(java.lang.String permission, java.lang.String scopeId, java.lang.String userId, java.util.Set<java.lang.String> groupKeys, java.lang.String tenantId)

Specified by:

hasPermissionForHistoricScope in interface PermissionService

fetchPermissionsForHistoricScope

public java.util.List<java.lang.String> fetchPermissionsForHistoricScope(java.lang.String scopeId, java.lang.String userId, java.util.Set<java.lang.String> groupKeys, java.lang.String tenantId)

Specified by:

fetchPermissionsForHistoricScope in interface PermissionService

fetchPermissionsForHistoricScope

public java.util.List<java.lang.String> fetchPermissionsForHistoricScope(java.lang.String scopeId, boolean checkWritePermissionInParent, java.lang.String userId, java.util.Set<java.lang.String> groupKeys, java.lang.String tenantId)

Specified by:

fetchPermissionsForHistoricScope in interface PermissionService

getRuntimeCasePermissions

public java.util.List<java.lang.String> getRuntimeCasePermissions(java.lang.String caseInstanceId, java.lang.String definitionId, java.util.List<? extends org.flowable.identitylink.api.IdentityLinkInfo> identityLinks, java.lang.String tenantId)

Specified by:

getRuntimeCasePermissions in interface CasePermissionService

getHistoricCasePermissions

public java.util.List<java.lang.String> getHistoricCasePermissions(java.lang.String caseInstanceId, java.lang.String definitionId, java.util.List<? extends org.flowable.identitylink.api.IdentityLinkInfo> identityLinks, java.lang.String tenantId)

Specified by:

getHistoricCasePermissions in interface CasePermissionService

hasReadPermissionOnScopeDefinition

public boolean hasReadPermissionOnScopeDefinition(java.lang.String scopeDefinitionId, java.lang.String scopeDefinitionKey, java.lang.String userId, java.util.Set<java.lang.String> groupKeys, java.lang.String tenantId)

Specified by:

hasReadPermissionOnScopeDefinition in interface PermissionService

getCaseInstance

public org.flowable.cmmn.api.runtime.CaseInstance getCaseInstance(java.lang.String caseInstanceId, java.lang.String tenantId)

Specified by:

getCaseInstance in interface CasePermissionService

getHistoricCaseInstance

public org.flowable.cmmn.api.history.HistoricCaseInstance getHistoricCaseInstance(java.lang.String caseInstanceId, java.lang.String tenantId)

Specified by:

getHistoricCaseInstance in interface CasePermissionService

hasPermissionForCaseInstance

protected boolean hasPermissionForCaseInstance(java.lang.String permission, java.lang.String caseInstanceId, boolean isHistoricInstance, java.lang.String startUserId, java.util.List<? extends org.flowable.identitylink.api.IdentityLinkInfo> identityLinks, java.lang.String caseDefinitionId, java.lang.String userId, java.util.Set<java.lang.String> groupKeys, java.lang.String tenantId)

hasPermission

protected boolean hasPermission(java.lang.String permission, java.lang.String startUserId, java.util.List<? extends org.flowable.identitylink.api.IdentityLinkInfo> identityLinks, SecurityPolicyModel securityPolicyModel)

getSecurityModel

protected SecurityPolicyModel getSecurityModel(java.lang.String caseDefinitionId, java.lang.String tenantId)

findCaseDefinition

protected org.flowable.cmmn.api.repository.CaseDefinition findCaseDefinition(java.lang.String caseDefinitionId, java.lang.String caseDefinitionKey, java.lang.String tenantId)

translateParentPermissions

protected java.util.List<java.lang.String> translateParentPermissions(java.util.List<java.lang.String> parentPermissions, java.lang.String scopeType)

checkPermissionInCaseParent

protected boolean checkPermissionInCaseParent(java.lang.String casePermission, SecurityPolicyModel securityPolicyModel)