com.rapidclipse.framework.security.authorization.RoleUpdater Maven / Gradle / Ivy
Go to download
Show more of this group Show more artifacts with this name
Show all versions of rap-security-auth Show documentation
Show all versions of rap-security-auth Show documentation
Rapid Application Platform / Security / Authentication and Authorization
/*
* Copyright (C) 2013-2023 by XDEV Software, All Rights Reserved.
*
* This file is part of the RapidClipse Application Platform (RAP).
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License as published by
* the Free Software Foundation, either version 3 of the License, or
* (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
* along with this program. If not, see .
*
* SPDX-License-Identifier: AGPL-3.0-or-later
*
* Contributors:
* XDEV Software - initial API and implementation
*/
package com.rapidclipse.framework.security.authorization;
import java.util.Collection;
import java.util.Set;
/**
* Function type for updating a passed {@link Role} instance for a given role name and collections of parent roles
* and explicit permissions.
* For more details, see {@link #updateRole(Role, String, Set, Set)}.
*
* @author XDEV Software (TM)
*/
@FunctionalInterface
public interface RoleUpdater
{
/**
* Updates the passed {@link Role} instance for the given role name and collections of parent roles
* and explicit permissions, where updating can mean anything from just validating to actually changing the passed
* subject's state with the passed content.
*
* @param role
* the {@link Role} instance to be updated.
* @param name
* the identifying name of the passed {@link Role} instance.
* @param parentRoles
* the parent roles that the {@link Role} instance must reference to be valid.
* @param permissions
* the explicit permissions that the {@link Role} instance must reference to be valid.
*/
public void updateRole(Role role, String name, Set parentRoles, Set permissions);
/**
* Updating preparation callback hook that gets called once on the beginning of very updating process, before any
* authorization instances are updated.
* The default implementation of this method is empty.
* An example usage for this method is to create and store rollback information on the passed roles.
*
* @param existingRoles
* the roles already existing before the updating process.
*/
public default void prepareRoleUpdate(final Collection existingRoles)
{
// no-op in default implementation
}
/**
* Update committing callback hook that gets called once at the end of very successful updating process, after all
* authorization instances are updated.
* The default implementation of this method is empty.
* An example usage for this method is to relay committing of changes to some other data structure or application
* part.
*
* @param updatedRoles
* the updated and potentially newly created roles.
*/
public default void commitRoleUpdate(final Collection updatedRoles)
{
// no-op in default implementation
}
/**
* Updating exception handling callback hook that gets called once if any {@link Exception} is encountered during
* the updating process.
* The default implementation of this method is empty.
* An example usage for this method is to rollback (revert) all mutated {@link Role} instances that have
* already existed before the updating process.
*
* @param updatedRoles
* the updated and potentially newly created, empty or inconsistent roles.
*/
public default void rollbackRoleUpdate(final Collection updatedRoles, final Exception cause)
{
// no-op in default implementation
}
/**
* Updating preparation callback hook that gets called once at the end of the updating process in any case
* (both success and encountered exception).
* The default implementation of this method is empty.
* An example usage for this method is to clear any internally stored meta data (e.g. rollback information).
*/
public default void cleanupRoleUpdate()
{
// no-op in default implementation
}
}