org.dataone.service.cn.impl.v2

Class CNIdentityLDAPImpl

java.lang.Object

org.dataone.cn.ldap.LDAPService

org.dataone.service.cn.impl.v2.CNIdentityLDAPImpl

All Implemented Interfaces:

org.dataone.service.cn.v2.CNIdentity

public class CNIdentityLDAPImpl
extends org.dataone.cn.ldap.LDAPService
implements org.dataone.service.cn.v2.CNIdentity

Proposed LDAP schema extensions objectClass: d1Principal attributes: equivalentIdentity (0...n) - used when mapping is confirmed equivalentIdentityRequest (0...n) - used when mapping is requested (before confirmation) isVerified (1...1) - used when untrusted account is registered objectClass: d1Group attributes: adminIdentity (0...n) - references other Principals that are allowed to modify the group

Author:

leinfelder

Field Summary

Fields

Modifier and Type	Field and Description
static org.apache.commons.logging.Log	log

Constructor Summary

Constructors

Constructor and Description
CNIdentityLDAPImpl()

Method Summary

Modifier and Type	Method and Description
boolean	confirmMapIdentity(org.dataone.service.types.v1.Session session, org.dataone.service.types.v1.Subject secondarySubject)
String	constructDn(String subject)
org.dataone.service.types.v1.Subject	createGroup(org.dataone.service.types.v1.Session session, org.dataone.service.types.v1.Group group)
boolean	denyMapIdentity(org.dataone.service.types.v1.Session session, org.dataone.service.types.v1.Subject secondarySubject)
org.dataone.service.types.v1.SubjectInfo	getPendingMapIdentity(org.dataone.service.types.v1.Session session, org.dataone.service.types.v1.Subject subject)
org.dataone.service.types.v1.SubjectInfo	getSubjectInfo(org.dataone.service.types.v1.Session session, org.dataone.service.types.v1.Subject subject)
org.dataone.service.types.v1.SubjectInfo	listSubjects(org.dataone.service.types.v1.Session session, String query, String status, Integer start, Integer count)
protected List<org.dataone.service.types.v1.Group>	lookupGroups(DirContext dirContext, String personDn) Given a Person, we need to find which Groups it is a member of
static void	main(String[] args)
boolean	mapIdentity(org.dataone.service.types.v1.Session session, org.dataone.service.types.v1.Subject primarySubject, org.dataone.service.types.v1.Subject secondarySubject)
org.dataone.service.types.v1.Subject	registerAccount(org.dataone.service.types.v1.Session session, org.dataone.service.types.v1.Person p)
boolean	removeMapIdentity(org.dataone.service.types.v1.Session session, org.dataone.service.types.v1.Subject secondarySubject)
protected boolean	removeSubject(DirContext dirContext, org.dataone.service.types.v1.Subject p)
boolean	requestMapIdentity(org.dataone.service.types.v1.Session session, org.dataone.service.types.v1.Subject secondarySubject)
org.dataone.service.types.v1.Subject	updateAccount(org.dataone.service.types.v1.Session session, org.dataone.service.types.v1.Person p)
boolean	updateGroup(org.dataone.service.types.v1.Session session, org.dataone.service.types.v1.Group group)
boolean	verifyAccount(org.dataone.service.types.v1.Session session, org.dataone.service.types.v1.Subject subject)

Methods inherited from class org.dataone.cn.ldap.LDAPService

addCountry, addDc, addOrg, addOrgUnit, checkAttribute, constructTree, getAttributeValues, getBase, getEnumerationValueString, parseAttribute, removeEntry, setBase

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

log

public static org.apache.commons.logging.Log log

Constructor Detail

CNIdentityLDAPImpl

public CNIdentityLDAPImpl()

Method Detail

createGroup

public org.dataone.service.types.v1.Subject createGroup(org.dataone.service.types.v1.Session session,
                                                        org.dataone.service.types.v1.Group group)
                                                 throws org.dataone.service.exceptions.ServiceFailure,
                                                        org.dataone.service.exceptions.InvalidToken,
                                                        org.dataone.service.exceptions.NotAuthorized,
                                                        org.dataone.service.exceptions.NotImplemented,
                                                        org.dataone.service.exceptions.IdentifierNotUnique,
                                                        org.dataone.service.exceptions.InvalidRequest

Specified by:

createGroup in interface org.dataone.service.cn.v2.CNIdentity

Throws:

org.dataone.service.exceptions.ServiceFailure

org.dataone.service.exceptions.InvalidToken

org.dataone.service.exceptions.NotAuthorized

org.dataone.service.exceptions.NotImplemented

org.dataone.service.exceptions.IdentifierNotUnique

org.dataone.service.exceptions.InvalidRequest

updateGroup

public boolean updateGroup(org.dataone.service.types.v1.Session session,
                           org.dataone.service.types.v1.Group group)
                    throws org.dataone.service.exceptions.ServiceFailure,
                           org.dataone.service.exceptions.InvalidToken,
                           org.dataone.service.exceptions.NotAuthorized,
                           org.dataone.service.exceptions.NotFound,
                           org.dataone.service.exceptions.NotImplemented,
                           org.dataone.service.exceptions.InvalidRequest

Specified by:

updateGroup in interface org.dataone.service.cn.v2.CNIdentity

Throws:

org.dataone.service.exceptions.ServiceFailure

org.dataone.service.exceptions.InvalidToken

org.dataone.service.exceptions.NotAuthorized

org.dataone.service.exceptions.NotFound

org.dataone.service.exceptions.NotImplemented

org.dataone.service.exceptions.InvalidRequest

mapIdentity

public boolean mapIdentity(org.dataone.service.types.v1.Session session,
                           org.dataone.service.types.v1.Subject primarySubject,
                           org.dataone.service.types.v1.Subject secondarySubject)
                    throws org.dataone.service.exceptions.ServiceFailure,
                           org.dataone.service.exceptions.InvalidToken,
                           org.dataone.service.exceptions.NotAuthorized,
                           org.dataone.service.exceptions.NotFound,
                           org.dataone.service.exceptions.NotImplemented,
                           org.dataone.service.exceptions.InvalidRequest

Specified by:

mapIdentity in interface org.dataone.service.cn.v2.CNIdentity

Throws:

org.dataone.service.exceptions.ServiceFailure

org.dataone.service.exceptions.InvalidToken

org.dataone.service.exceptions.NotAuthorized

org.dataone.service.exceptions.NotFound

org.dataone.service.exceptions.NotImplemented

org.dataone.service.exceptions.InvalidRequest

requestMapIdentity

public boolean requestMapIdentity(org.dataone.service.types.v1.Session session,
                                  org.dataone.service.types.v1.Subject secondarySubject)
                           throws org.dataone.service.exceptions.ServiceFailure,
                                  org.dataone.service.exceptions.InvalidToken,
                                  org.dataone.service.exceptions.NotAuthorized,
                                  org.dataone.service.exceptions.NotFound,
                                  org.dataone.service.exceptions.NotImplemented,
                                  org.dataone.service.exceptions.InvalidRequest

Specified by:

requestMapIdentity in interface org.dataone.service.cn.v2.CNIdentity

Throws:

org.dataone.service.exceptions.ServiceFailure

org.dataone.service.exceptions.InvalidToken

org.dataone.service.exceptions.NotAuthorized

org.dataone.service.exceptions.NotFound

org.dataone.service.exceptions.NotImplemented

org.dataone.service.exceptions.InvalidRequest

confirmMapIdentity

public boolean confirmMapIdentity(org.dataone.service.types.v1.Session session,
                                  org.dataone.service.types.v1.Subject secondarySubject)
                           throws org.dataone.service.exceptions.ServiceFailure,
                                  org.dataone.service.exceptions.InvalidToken,
                                  org.dataone.service.exceptions.NotAuthorized,
                                  org.dataone.service.exceptions.NotFound,
                                  org.dataone.service.exceptions.NotImplemented

Specified by:

confirmMapIdentity in interface org.dataone.service.cn.v2.CNIdentity

Throws:

org.dataone.service.exceptions.ServiceFailure

org.dataone.service.exceptions.InvalidToken

org.dataone.service.exceptions.NotAuthorized

org.dataone.service.exceptions.NotFound

org.dataone.service.exceptions.NotImplemented

updateAccount

public org.dataone.service.types.v1.Subject updateAccount(org.dataone.service.types.v1.Session session,
                                                          org.dataone.service.types.v1.Person p)
                                                   throws org.dataone.service.exceptions.ServiceFailure,
                                                          org.dataone.service.exceptions.InvalidCredentials,
                                                          org.dataone.service.exceptions.NotImplemented,
                                                          org.dataone.service.exceptions.InvalidRequest,
                                                          org.dataone.service.exceptions.NotAuthorized

Specified by:

updateAccount in interface org.dataone.service.cn.v2.CNIdentity

Throws:

org.dataone.service.exceptions.ServiceFailure

org.dataone.service.exceptions.InvalidCredentials

org.dataone.service.exceptions.NotImplemented

org.dataone.service.exceptions.InvalidRequest

org.dataone.service.exceptions.NotAuthorized

verifyAccount

public boolean verifyAccount(org.dataone.service.types.v1.Session session,
                             org.dataone.service.types.v1.Subject subject)
                      throws org.dataone.service.exceptions.ServiceFailure,
                             org.dataone.service.exceptions.NotAuthorized,
                             org.dataone.service.exceptions.NotImplemented,
                             org.dataone.service.exceptions.InvalidToken,
                             org.dataone.service.exceptions.InvalidRequest

Specified by:

verifyAccount in interface org.dataone.service.cn.v2.CNIdentity

Throws:

org.dataone.service.exceptions.ServiceFailure

org.dataone.service.exceptions.NotAuthorized

org.dataone.service.exceptions.NotImplemented

org.dataone.service.exceptions.InvalidToken

org.dataone.service.exceptions.InvalidRequest

constructDn

public String constructDn(String subject)

registerAccount

public org.dataone.service.types.v1.Subject registerAccount(org.dataone.service.types.v1.Session session,
                                                            org.dataone.service.types.v1.Person p)
                                                     throws org.dataone.service.exceptions.ServiceFailure,
                                                            org.dataone.service.exceptions.IdentifierNotUnique,
                                                            org.dataone.service.exceptions.InvalidCredentials,
                                                            org.dataone.service.exceptions.NotImplemented,
                                                            org.dataone.service.exceptions.InvalidRequest

Specified by:

registerAccount in interface org.dataone.service.cn.v2.CNIdentity

Throws:

org.dataone.service.exceptions.ServiceFailure

org.dataone.service.exceptions.IdentifierNotUnique

org.dataone.service.exceptions.InvalidCredentials

org.dataone.service.exceptions.NotImplemented

org.dataone.service.exceptions.InvalidRequest

getSubjectInfo

public org.dataone.service.types.v1.SubjectInfo getSubjectInfo(org.dataone.service.types.v1.Session session,
                                                               org.dataone.service.types.v1.Subject subject)
                                                        throws org.dataone.service.exceptions.ServiceFailure,
                                                               org.dataone.service.exceptions.NotAuthorized,
                                                               org.dataone.service.exceptions.NotImplemented,
                                                               org.dataone.service.exceptions.NotFound

Specified by:

getSubjectInfo in interface org.dataone.service.cn.v2.CNIdentity

Throws:

org.dataone.service.exceptions.ServiceFailure

org.dataone.service.exceptions.NotAuthorized

org.dataone.service.exceptions.NotImplemented

org.dataone.service.exceptions.NotFound

lookupGroups

protected List<org.dataone.service.types.v1.Group> lookupGroups(DirContext dirContext,
                                                                String personDn)
                                                         throws org.dataone.service.exceptions.ServiceFailure

Given a Person, we need to find which Groups it is a member of

Parameters:

personDn - the Person dn for which we need membership information

Returns:

list of Groups the person belongs to

Throws:

org.dataone.service.exceptions.ServiceFailure

listSubjects

public org.dataone.service.types.v1.SubjectInfo listSubjects(org.dataone.service.types.v1.Session session,
                                                             String query,
                                                             String status,
                                                             Integer start,
                                                             Integer count)
                                                      throws org.dataone.service.exceptions.ServiceFailure,
                                                             org.dataone.service.exceptions.InvalidToken,
                                                             org.dataone.service.exceptions.NotAuthorized,
                                                             org.dataone.service.exceptions.NotImplemented

Specified by:

listSubjects in interface org.dataone.service.cn.v2.CNIdentity

Throws:

org.dataone.service.exceptions.ServiceFailure

org.dataone.service.exceptions.InvalidToken

org.dataone.service.exceptions.NotAuthorized

org.dataone.service.exceptions.NotImplemented

removeSubject

protected boolean removeSubject(DirContext dirContext,
                                org.dataone.service.types.v1.Subject p)

denyMapIdentity

public boolean denyMapIdentity(org.dataone.service.types.v1.Session session,
                               org.dataone.service.types.v1.Subject secondarySubject)
                        throws org.dataone.service.exceptions.ServiceFailure,
                               org.dataone.service.exceptions.InvalidToken,
                               org.dataone.service.exceptions.NotAuthorized,
                               org.dataone.service.exceptions.NotFound,
                               org.dataone.service.exceptions.NotImplemented

Specified by:

denyMapIdentity in interface org.dataone.service.cn.v2.CNIdentity

Throws:

org.dataone.service.exceptions.ServiceFailure

org.dataone.service.exceptions.InvalidToken

org.dataone.service.exceptions.NotAuthorized

org.dataone.service.exceptions.NotFound

org.dataone.service.exceptions.NotImplemented

getPendingMapIdentity

public org.dataone.service.types.v1.SubjectInfo getPendingMapIdentity(org.dataone.service.types.v1.Session session,
                                                                      org.dataone.service.types.v1.Subject subject)
                                                               throws org.dataone.service.exceptions.ServiceFailure,
                                                                      org.dataone.service.exceptions.InvalidToken,
                                                                      org.dataone.service.exceptions.NotAuthorized,
                                                                      org.dataone.service.exceptions.NotFound,
                                                                      org.dataone.service.exceptions.NotImplemented

Specified by:

getPendingMapIdentity in interface org.dataone.service.cn.v2.CNIdentity

Throws:

org.dataone.service.exceptions.ServiceFailure

org.dataone.service.exceptions.InvalidToken

org.dataone.service.exceptions.NotAuthorized

org.dataone.service.exceptions.NotFound

org.dataone.service.exceptions.NotImplemented

removeMapIdentity

public boolean removeMapIdentity(org.dataone.service.types.v1.Session session,
                                 org.dataone.service.types.v1.Subject secondarySubject)
                          throws org.dataone.service.exceptions.ServiceFailure,
                                 org.dataone.service.exceptions.InvalidToken,
                                 org.dataone.service.exceptions.NotAuthorized,
                                 org.dataone.service.exceptions.NotFound,
                                 org.dataone.service.exceptions.NotImplemented

Specified by:

removeMapIdentity in interface org.dataone.service.cn.v2.CNIdentity

Throws:

org.dataone.service.exceptions.ServiceFailure

org.dataone.service.exceptions.InvalidToken

org.dataone.service.exceptions.NotAuthorized

org.dataone.service.exceptions.NotFound

org.dataone.service.exceptions.NotImplemented

main

public static void main(String[] args)