org.dataone.solr.servlet

Class LogServiceSessionAuthorizationFilter

java.lang.Object

org.dataone.solr.servlet.SessionAuthorizationFilterStrategy

org.dataone.solr.servlet.LogServiceSessionAuthorizationFilter

All Implemented Interfaces:

javax.servlet.Filter

public class LogServiceSessionAuthorizationFilter
extends SessionAuthorizationFilterStrategy
implements javax.servlet.Filter

Field Summary

Fields

Modifier and Type	Field and Description
protected static org.apache.commons.logging.Log	logger

Constructor Summary

Constructors

Constructor and Description
LogServiceSessionAuthorizationFilter()

Method Summary

Modifier and Type	Method and Description
protected void	addAuthenticatedSubjectsToRequest(org.dataone.cn.servlet.http.ProxyServletRequestWrapper proxyRequest, org.dataone.service.types.v1.Session session, org.dataone.service.types.v1.Subject authorizedSubject) Allows concrete implementations of SessionAuthorizationFilterStrategy to determine how/what authenticated subjects are added to the request's parameter values - ParameterKeys.AUTHORIZED_SUBJECTS, as well as if public user and authenticated user constants are provided.
protected String	getServiceMethodName() The service name to look up for additional admin users defined for the services service method restrictions.
protected void	handleNoCertificateManagerSession(org.dataone.cn.servlet.http.ProxyServletRequestWrapper proxyRequest, javax.servlet.ServletResponse response, javax.servlet.FilterChain fc) Allows concrete implementations of SessionAuthorizationFilterStrategy to determine what access (if any) to allow requests that do have session information available from the dataONE CertificateManager.

Methods inherited from class org.dataone.solr.servlet.SessionAuthorizationFilterStrategy

destroy, doFilter, init

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface javax.servlet.Filter

destroy, doFilter, init

Field Detail

logger

protected static org.apache.commons.logging.Log logger

Constructor Detail

LogServiceSessionAuthorizationFilter

public LogServiceSessionAuthorizationFilter()

Method Detail

addAuthenticatedSubjectsToRequest

protected void addAuthenticatedSubjectsToRequest(org.dataone.cn.servlet.http.ProxyServletRequestWrapper proxyRequest,
                                                 org.dataone.service.types.v1.Session session,
                                                 org.dataone.service.types.v1.Subject authorizedSubject)
                                          throws org.dataone.service.exceptions.ServiceFailure,
                                                 org.dataone.service.exceptions.NotAuthorized,
                                                 org.dataone.service.exceptions.NotImplemented

Description copied from class: SessionAuthorizationFilterStrategy

Allows concrete implementations of SessionAuthorizationFilterStrategy to determine how/what authenticated subjects are added to the request's parameter values - ParameterKeys.AUTHORIZED_SUBJECTS, as well as if public user and authenticated user constants are provided. Called from doFilter

Specified by:

addAuthenticatedSubjectsToRequest in class SessionAuthorizationFilterStrategy

Throws:

org.dataone.service.exceptions.ServiceFailure

org.dataone.service.exceptions.NotAuthorized

org.dataone.service.exceptions.NotImplemented

handleNoCertificateManagerSession

protected void handleNoCertificateManagerSession(org.dataone.cn.servlet.http.ProxyServletRequestWrapper proxyRequest,
                                                 javax.servlet.ServletResponse response,
                                                 javax.servlet.FilterChain fc)
                                          throws javax.servlet.ServletException,
                                                 IOException,
                                                 org.dataone.service.exceptions.NotAuthorized

Description copied from class: SessionAuthorizationFilterStrategy

Allows concrete implementations of SessionAuthorizationFilterStrategy to determine what access (if any) to allow requests that do have session information available from the dataONE CertificateManager. Called from doFilter

Specified by:

handleNoCertificateManagerSession in class SessionAuthorizationFilterStrategy

Throws:

javax.servlet.ServletException

IOException

org.dataone.service.exceptions.NotAuthorized

getServiceMethodName

protected String getServiceMethodName()

Description copied from class: SessionAuthorizationFilterStrategy

The service name to look up for additional admin users defined for the services service method restrictions.

Specified by:

getServiceMethodName in class SessionAuthorizationFilterStrategy

Returns:

Name of service.