All Downloads are FREE. Search and download functionalities are using the official Maven repository.
  • Log In
  • Register

    • edu.internet2.middleware.grouper.internal.dao.AttributeAssignDAO Maven / Gradle / Ivy

    There is a newer version: 5.13.5
    Show newest version
    /**
 * Copyright 2014 Internet2
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *   http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
/*
 * @author mchyzer
 * $Id: AttributeAssignDAO.java,v 1.10 2009-10-02 05:57:58 mchyzer Exp $
 */
package edu.internet2.middleware.grouper.internal.dao;

import java.util.Collection;
import java.util.Map;
import java.util.Set;

import edu.internet2.middleware.grouper.attr.AttributeDef;
import edu.internet2.middleware.grouper.attr.AttributeDefName;
import edu.internet2.middleware.grouper.attr.AttributeDefType;
import edu.internet2.middleware.grouper.attr.AttributeDefValueType;
import edu.internet2.middleware.grouper.attr.assign.AttributeAssign;
import edu.internet2.middleware.grouper.attr.assign.AttributeAssignType;
import edu.internet2.middleware.grouper.attr.value.AttributeAssignValueContainer;
import edu.internet2.middleware.grouperClient.collections.MultiKey;

/**
 * attribute assign data access methods
 */
public interface AttributeAssignDAO extends GrouperDAO {
  
  /**
   * find records which are disabled which shouldnt be, and enabled which shouldnt be
   * @param queryTime
   * @return the attribute assignments
   */
  public Set findAllEnabledDisabledMismatch(long queryTime);

  /** 
   * insert or update an attribute assign object 
   * @param attributeAssign 
   */
  public void saveOrUpdate(AttributeAssign attributeAssign);
  
  /** 
   * delete an attribute assign object 
   * @param attributeAssign 
   */
  public void delete(AttributeAssign attributeAssign);
  
  /**
   * find by id, use cache
   * @param id
   * @param exceptionIfNotFound
   * @return the attribute assign or null if not there
   */
  public AttributeAssign findById(String id, boolean exceptionIfNotFound);

  /**
   * @param id
   * @param exceptionIfNotFound
   * @param useCache true to use cache, false for not
   * @return the attribute assign or null if not there
   */
  public AttributeAssign findById(String id, boolean exceptionIfNotFound, boolean useCache);

  /**
   * @param groupId
   * @param attributeDefNameId
   * @return the attribute assigns or null if not there
   */
  public Set findByGroupIdAndAttributeDefNameId(String groupId, String attributeDefNameId);

  /**
   * @param groupId
   * @param attributeDefId
   * @return the attribute assigns or null if not there
   */
  public Set findByGroupIdAndAttributeDefId(String groupId, String attributeDefId);

  /**
   * find attribute def names (distinct) by attribute def id
   * @param groupId
   * @param attributeDefId
   * @return the attribute defs
   */
  public Set findAttributeDefNamesByGroupIdAndAttributeDefId(String groupId, String attributeDefId);

  /**
   * @param memberId
   * @param attributeDefNameId
   * @return the attribute assigns or null if not there
   */
  public Set findByMemberIdAndAttributeDefNameId(String memberId, String attributeDefNameId);

  /**
   * @param memberId
   * @param attributeDefId
   * @return the attribute assigns or null if not there
   */
  public Set findByMemberIdAndAttributeDefId(String memberId, String attributeDefId);

  /**
   * find attribute def names (distinct) by attribute def id
   * @param memberId
   * @param attributeDefId
   * @return the attribute defs
   */
  public Set findAttributeDefNamesByMemberIdAndAttributeDefId(String memberId, String attributeDefId);

  /**
   * find attribute assigns by ids, as root (no security).  this is for one type assignment.
   * @param attributeTypeAssignId type assign id
   * @return attributes
   */
  public Set findByAssignTypeId(
      String attributeTypeAssignId);

  /**
   * find attribute assigns by ids, as root (no security).  order by attribute type def name, so they are in order
   * @param attributeTypeDefNameId attribute def name of the type on the owner
   * @param queryOptions
   * @return attributes grouped by the type assignment
   */
  public Map> findByAttributeTypeDefNameId(
      String attributeTypeDefNameId, QueryOptions queryOptions);
  
  /**
   * @param stemId
   * @param attributeDefNameId
   * @return the attribute assigns or null if not there
   */
  public Set findByStemIdAndAttributeDefNameId(String stemId, String attributeDefNameId);

  /**
   * @param stemId
   * @param attributeDefId
   * @return the attribute assigns or null if not there
   */
  public Set findByStemIdAndAttributeDefId(String stemId, String attributeDefId);

  /**
   * find attribute def names (distinct) by attribute def id
   * @param stemId
   * @param attributeDefId
   * @return the attribute defs
   */
  public Set findAttributeDefNamesByStemIdAndAttributeDefId(String stemId, String attributeDefId);

  /**
   * find attribute def names (distinct) by attribute def id
   * @param attributeDefIdToAssignTo
   * @param attributeDefIdToAssign
   * @return the attribute defs
   */
  public Set findAttributeDefNamesByAttributeDefIdAndAttributeDefId(String attributeDefIdToAssignTo, 
      String attributeDefIdToAssign);

  /**
   * @param attributeDefIdToAssignTo
   * @param attributeDefIdToAssign
   * @return the attribute assigns or null if not there
   */
  public Set findByAttributeDefIdAndAttributeDefId(String attributeDefIdToAssignTo, String attributeDefIdToAssign);

  /**
   * @param attributeDefIdToAssignTo
   * @param attributeDefNameIdToAssign
   * @return the attribute assigns or null if not there
   */
  public Set findByAttributeDefIdAndAttributeDefNameId(String attributeDefIdToAssignTo, String attributeDefNameIdToAssign);

  /**
   * @param ownerAttributeAssignId
   * @return the attribute assigns or empty if not there
   */
  public Set findByOwnerAttributeAssignId(String ownerAttributeAssignId);

  /**
   * @param ownerAttributeAssignId
   * @param queryOptions
   * @return the attribute assigns or empty if not there
   */
  public Set findByOwnerAttributeAssignId(String ownerAttributeAssignId, QueryOptions queryOptions);

  /**
   * @param ownerAttributeDefId
   * @return the attribute assigns or empty if not there
   */
  public Set findByOwnerAttributeDefId(String ownerAttributeDefId);

  /**
   * @param attributeDefNameId
   * @return the attribute defs or empty if not there
   */
  public Set findAttributeDefsByAttributeDefNameId(String attributeDefNameId);

  /**
   * @param ownerGroupId
   * @return the attribute assigns or empty if not there
   */
  public Set findByOwnerGroupId(String ownerGroupId);
  
  /**
   * retrieve by owner immediate membership ids.  note, this is not a secure method, will return any results queried
   * @param ownerMembershipIds 
   * @return the attribute assigns, will not return null
   */
  public Set findByOwnerMembershipIds(Collection ownerMembershipIds);
  
  /**
   * retrieve by owner attribute assign ids.  note, this is not a secure method, will return any results queried
   * @param ownerAttributeAssignIds 
   * @return the attribute assigns, will not return null
   */
  public Set findByOwnerAttributeAssignIds(Collection ownerAttributeAssignIds);

  /**
   * @param ownerStemId
   * @return the attribute assigns or empty if not there
   */
  public Set findByOwnerStemId(String ownerStemId);

  /**
   * @param ownerMemberId
   * @return the attribute assigns or empty if not there
   */
  public Set findByOwnerMemberId(String ownerMemberId);

  /**
   * @param ownerMembershipId
   * @return the attribute assigns or empty if not there
   */
  public Set findByOwnerMembershipId(String ownerMembershipId);



  /**
   * find attribute def names (distinct) by attribute def id
   * @param membershipIdToAssignTo
   * @param attributeDefIdToAssign
   * @return the attribute defs
   */
  public Set findAttributeDefNamesByMembershipIdAndAttributeDefId(
      String membershipIdToAssignTo, 
      String attributeDefIdToAssign);

  /**
   * @param membershipIdToAssignTo
   * @param attributeDefIdToAssign
   * @return the attribute assigns or null if not there
   */
  public Set findByMembershipIdAndAttributeDefId(
      String membershipIdToAssignTo, String attributeDefIdToAssign);

  /**
   * @param membershipIdToAssignTo
   * @param attributeDefNameIdToAssign
   * @return the attribute assigns or null if not there
   */
  public Set findByMembershipIdAndAttributeDefNameId(
      String membershipIdToAssignTo, String attributeDefNameIdToAssign);

  /**
   * find attribute def names (distinct) by attribute def id
   * @param attrAssignIdToAssignTo
   * @param attributeDefIdToAssign
   * @return the attribute defs
   */
  public Set findAttributeDefNamesByAttrAssignIdAndAttributeDefId(
      String attrAssignIdToAssignTo, 
      String attributeDefIdToAssign);

  /**
   * @param attrAssignIdToAssignTo
   * @param attributeDefIdToAssign
   * @return the attribute assigns or null if not there
   */
  public Set findByAttrAssignIdAndAttributeDefId(
      String attrAssignIdToAssignTo, String attributeDefIdToAssign);

  /**
   * @param attributeDefNameId
   * @return the attribute assigns or empty if not there
   */
  public Set findByAttributeDefNameId(
      String attributeDefNameId);

  /**
   * @param attrAssignIdToAssignTo
   * @param attributeDefNameIdToAssign
   * @return the attribute assigns or null if not there
   */
  public Set findByAttrAssignIdAndAttributeDefNameId(
      String attrAssignIdToAssignTo, String attributeDefNameIdToAssign);

  /**
   * find attribute def names (distinct) by attribute def id
   * @param groupId
   * @param memberId
   * @param attributeDefIdToAssign
   * @return the attribute defs
   */
  public Set findAttributeDefNamesByGroupIdMemberIdAndAttributeDefId(
      String groupId, String memberId, 
      String attributeDefIdToAssign);

  /**
   * @param groupId
   * @param memberId
   * @param attributeDefIdToAssign
   * @return the attribute assigns or null if not there
   */
  public Set findByGroupIdMemberIdAndAttributeDefId(
      String groupId, String memberId, String attributeDefIdToAssign);

  /**
   * @param groupId
   * @param memberId
   * @param attributeDefNameIdToAssign
   * @return the attribute assigns or null if not there
   */
  public Set findByGroupIdMemberIdAndAttributeDefNameId(
      String groupId, String memberId, String attributeDefNameIdToAssign);

  /**
   * save the update properties which are auto saved when business method is called
   * @param attributeAssign
   */
  public void saveUpdateProperties(AttributeAssign attributeAssign);

  /**
   * @param id if find by id, that is it
   * @param idsToIgnore dont return anything in this list, already used or will be used
   * @param attributeDefNameId which attribute is assigned
   * @param attributeAssignActionId is the action for this assignment
   * @param ownerAttributeAssignId owner must match 
   * @param ownerAttributeDefId owner must match
   * @param ownerGroupId owner must match
   * @param ownerMemberId owner must match
   * @param ownerMembershipId owner must match
   * @param ownerStemId owner must match
   * @param exceptionIfNull 
   * @param disabledTimeDb if there are multiple without id match, and this matches, that is good
   * @param enabledTimeDb if there are multiple without id match, this is good
   * @param notes if there are multiple without id match, this is good
   * @param disallowed if there are multiple without id match, this is good
   * @return the attribute assign or null
   * @throws GrouperDAOException 
   * @since   1.6.0
   */
  AttributeAssign findByUuidOrKey(Collection idsToIgnore,
      String id, String attributeDefNameId, String attributeAssignActionId, String ownerAttributeAssignId, String ownerAttributeDefId, String ownerGroupId,
      String ownerMemberId, String ownerMembershipId, String ownerStemId, boolean exceptionIfNull, 
      Long disabledTimeDb, Long enabledTimeDb, String notes, boolean disallowed) throws GrouperDAOException;

  /**
   * @param actionId 
   * @return the assignments
   */
  Set findByActionId(String actionId);

  /**
   * securely search for assignments.  need to pass in either the assign ids, def ids, def name ids, or group ids
   * cannot have more than 100 bind variables
   * @param attributeAssignIds
   * @param attributeDefIds optional
   * @param attributeDefNameIds mutually exclusive with attributeDefIds
   * @param groupIds optional
   * @param actions (null means all actions)
   * @param enabled (null means all, true means enabled, false means disabled)
   * @param includeAssignmentsOnAssignments if assignments on assignments should also be included
   * @param attributeDefType null for all, or specify a type e.g. AttributeDefType.limit
   * @return the assignments
   */
  public Set findGroupAttributeAssignments(
      Collection attributeAssignIds,
      Collection attributeDefIds, 
      Collection attributeDefNameIds,
      Collection groupIds, 
      Collection actions, 
      Boolean enabled, 
      boolean includeAssignmentsOnAssignments,
      AttributeDefType attributeDefType);

  /**
   * securely search for assignments.  need to pass in either the assign ids, def ids, def name ids, or group ids
   * cannot have more than 100 bind variables
   * @param attributeAssignIds
   * @param attributeDefIds optional
   * @param attributeDefNameIds mutually exclusive with attributeDefIds
   * @param groupIds optional
   * @param actions (null means all actions)
   * @param enabled (null means all, true means enabled, false means disabled)
   * @param includeAssignmentsOnAssignments if assignments on assignments should also be included
   * @return the assignments
   */
  public Set findGroupAttributeAssignments(
      Collection attributeAssignIds,
      Collection attributeDefIds, 
      Collection attributeDefNameIds,
      Collection groupIds, 
      Collection actions, 
      Boolean enabled, 
      boolean includeAssignmentsOnAssignments);

  /**
   * securely search for assignments.  need to pass in either the assign ids, def ids, def name ids, or stem ids
   * cannot have more than 100 bind variables
   * @param attributeAssignIds
   * @param attributeDefIds optional
   * @param attributeDefNameIds mutually exclusive with attributeDefIds
   * @param stemIds optional
   * @param actions (null means all actions)
   * @param enabled (null means all, true means enabled, false means disabled)
   * @param includeAssignmentsOnAssignments if assignments on assignments should also be included
   * @return the assignments
   */
  public Set findStemAttributeAssignments(
      Collection attributeAssignIds,
      Collection attributeDefIds, 
      Collection attributeDefNameIds,
      Collection stemIds, Collection actions, 
      Boolean enabled, boolean includeAssignmentsOnAssignments);

  /**
   * securely search for assignments.  need to pass in either the assign ids, def ids, def name ids, or stem ids
   * cannot have more than 100 bind variables
   * @param attributeAssignIds
   * @param attributeDefIds optional
   * @param attributeDefNameIds mutually exclusive with attributeDefIds
   * @param stemIds optional
   * @param actions (null means all actions)
   * @param enabled (null means all, true means enabled, false means disabled)
   * @param includeAssignmentsOnAssignments if assignments on assignments should also be included
   * @param attributeDefType null for all, or specify a type e.g. AttributeDefType.limit
   * @param attributeDefValueType required if sending theValue, can be:
   * floating, integer, memberId, string, timestamp
   * @param theValue value if you are passing in one attributeDefNameLookup
   * @return the assignments
   */
  public Set findStemAttributeAssignments(
      Collection attributeAssignIds,
      Collection attributeDefIds, 
      Collection attributeDefNameIds,
      Collection stemIds, Collection actions, 
      Boolean enabled, boolean includeAssignmentsOnAssignments, 
      AttributeDefType attributeDefType,
      AttributeDefValueType attributeDefValueType,
      Object theValue);

  /**
   * securely search for assignments.  need to pass in either the assign ids, def ids, def name ids, or stem ids
   * cannot have more than 100 bind variables
   * @param attributeAssignIds
   * @param attributeDefIds optional
   * @param attributeDefNameIds mutually exclusive with attributeDefIds
   * @param stemIds optional
   * @param actions (null means all actions)
   * @param enabled (null means all, true means enabled, false means disabled)
   * @param includeAssignmentsOnAssignments if assignments on assignments should also be included
   * @param attributeDefType null for all, or specify a type e.g. AttributeDefType.limit
   * @param attributeDefValueType required if sending theValue, can be:
   * floating, integer, memberId, string, timestamp
   * @param theValue value if you are passing in one attributeDefNameLookup
   * @param attributeCheckReadOnAttributeDef if check READ security on attribute def
   * @return the assignments
   */
  public Set findStemAttributeAssignments(
      Collection attributeAssignIds,
      Collection attributeDefIds, 
      Collection attributeDefNameIds,
      Collection stemIds, Collection actions, 
      Boolean enabled, boolean includeAssignmentsOnAssignments, 
      AttributeDefType attributeDefType,
      AttributeDefValueType attributeDefValueType,
      Object theValue, boolean attributeCheckReadOnAttributeDef);


  /**
   * securely search for assignments.  need to pass in either the assign ids, def ids, def name ids, or stem ids
   * cannot have more than 100 bind variables
   * @param attributeAssignIds
   * @param attributeDefIds optional
   * @param attributeDefNameIds mutually exclusive with attributeDefIds
   * @param stemIds optional
   * @param actions (null means all actions)
   * @param enabled (null means all, true means enabled, false means disabled)
   * @param includeAssignmentsOnAssignments if assignments on assignments should also be included
   * @param attributeDefType null for all, or specify a type e.g. AttributeDefType.limit
   * @param attributeDefValueType required if sending theValue, can be:
   * floating, integer, memberId, string, timestamp
   * @param theValue value if you are passing in one attributeDefNameLookup
   * @param attributeCheckReadOnAttributeDef if check READ security on attribute def
   * @param idOfAttributeDefNameOnAssignment id of attribute def name that there is an assignment on assignment of with a value
   * @param attributeValuesOnAssignment values that the attribute def name on assignment of assignment has
   * @param idOfAttributeDefNameOnAssignment2 second id of attribute def name that there is an assignment on assignment of with a value
   * @param attributeValuesOnAssignment2 second values that the attribute def name on assignment of assignment has
   * @return the assignments
   */
  public Set findStemAttributeAssignments(
      Collection attributeAssignIds,
      Collection attributeDefIds, 
      Collection attributeDefNameIds,
      Collection stemIds, Collection actions, 
      Boolean enabled, boolean includeAssignmentsOnAssignments, 
      AttributeDefType attributeDefType,
      AttributeDefValueType attributeDefValueType,
      Object theValue, boolean attributeCheckReadOnAttributeDef, 
      final String idOfAttributeDefNameOnAssignment, Set attributeValuesOnAssignment,
      final String idOfAttributeDefNameOnAssignment2, Set attributeValuesOnAssignment2);
  
  
  /**
   * securely search for assignments.  need to pass in either the assign ids, def ids, def name ids, or member ids
   * cannot have more than 100 bind variables
   * @param attributeAssignIds
   * @param attributeDefIds optional
   * @param attributeDefNameIds mutually exclusive with attributeDefIds
   * @param memberIds optional
   * @param actions (null means all actions)
   * @param enabled (null means all, true means enabled, false means disabled)
   * @param includeAssignmentsOnAssignments if assignments on assignments should also be included
   * @return the assignments
   */
  public Set findMemberAttributeAssignments(
      Collection attributeAssignIds,
      Collection attributeDefIds, 
      Collection attributeDefNameIds,
      Collection memberIds, Collection actions, 
      Boolean enabled, boolean includeAssignmentsOnAssignments);

  /**
   * securely search for assignments.  need to pass in either the assign ids, def ids, def name ids, or attribute def assign to ids
   * cannot have more than 100 bind variables
   * @param attributeAssignIds
   * @param attributeDefIds optional
   * @param attributeDefNameIds mutually exclusive with attributeDefIds
   * @param attributeDefAssignToIds optional
   * @param actions (null means all actions)
   * @param enabled (null means all, true means enabled, false means disabled)
   * @param includeAssignmentsOnAssignments if assignments on assignments should also be included
   * @return the assignments
   */
  public Set findAttributeDefAttributeAssignments(
      Collection attributeAssignIds,
      Collection attributeDefIds, 
      Collection attributeDefNameIds,
      Collection attributeDefAssignToIds, Collection actions, 
      Boolean enabled, boolean includeAssignmentsOnAssignments);

  /**
   * securely search for assignments.  need to pass in either the assign ids, def ids, def name ids, or membership ids
   * cannot have more than 100 bind variables
   * @param attributeAssignIds
   * @param attributeDefIds optional
   * @param attributeDefNameIds mutually exclusive with attributeDefIds
   * @param membershipIds optional
   * @param actions (null means all actions)
   * @param enabled (null means all, true means enabled, false means disabled)
   * @param includeAssignmentsOnAssignments if assignments on assignments should also be included
   * @return the assignments
   */
  public Set findMembershipAttributeAssignments(
      Collection attributeAssignIds,
      Collection attributeDefIds, 
      Collection attributeDefNameIds,
      Collection membershipIds, Collection actions, 
      Boolean enabled, boolean includeAssignmentsOnAssignments);

  /**
   * securely search for assignments.  need to pass in either the assign ids, def ids, def name ids, or membership ids
   * cannot have more than 100 bind variables
   * @param attributeAssignIds
   * @param attributeDefIds optional
   * @param attributeDefNameIds mutually exclusive with attributeDefIds
   * @param groupIdsAndMemberIds optional
   * @param actions (null means all actions)
   * @param enabled (null means all, true means enabled, false means disabled)
   * @param includeAssignmentsOnAssignments if assignments on assignments should also be included
   * @return the assignments
   */
  public Set findAnyMembershipAttributeAssignments(
      Collection attributeAssignIds,
      Collection attributeDefIds, 
      Collection attributeDefNameIds,
      Collection groupIdsAndMemberIds, Collection actions, 
      Boolean enabled, boolean includeAssignmentsOnAssignments);

  /**
   * securely search for assignments.  need to pass in either the assign ids, def ids, def name ids, or membership ids
   * cannot have more than 100 bind variables
   * @param attributeAssignIds
   * @param attributeDefIds optional
   * @param attributeDefNameIds mutually exclusive with attributeDefIds
   * @param groupIdsAndMemberIds optional
   * @param actions (null means all actions)
   * @param enabled (null means all, true means enabled, false means disabled)
   * @param includeAssignmentsOnAssignments if assignments on assignments should also be included
   * @param attributeDefType attr, perm, limit, or null for all
   * @return the assignments
   */
  public Set findAnyMembershipAttributeAssignments(
      Collection attributeAssignIds,
      Collection attributeDefIds, 
      Collection attributeDefNameIds,
      Collection groupIdsAndMemberIds, Collection actions, 
      Boolean enabled, boolean includeAssignmentsOnAssignments, AttributeDefType attributeDefType);

  /**
   * find assignments on assignments.  Note, it is assumed the current user can read the assignments passed in (and other underlying objects),
   * so only the attributeDefs of the assignments on assignments are checked for security
   * @param attributeAssigns to find assignments on these assignments
   * @param attributeAssignType of the assignments we are looking for or null for all
   * @param enabled null for all, true for enabled only, false for disabled only
   * @return the assignments
   */
  public Set findAssignmentsOnAssignments(Collection attributeAssigns, 
      AttributeAssignType attributeAssignType, Boolean enabled);

  /**
   * find assignments on assignments.  Note, it is assumed the current user can read the assignments passed in (and other underlying objects),
   * so only the attributeDefs of the assignments on assignments are checked for security
   * @param attributeAssignIds to find assignments on these assignment ids
   * @param attributeAssignType of the assignments we are looking for
   * @param attributeDefType attr, perm, limit, or null for all
   * @param enabled null for all, true for enabled only, false for disabled only
   * @return the assignments
   */
  public Set findAssignmentsOnAssignmentsByIds(Collection attributeAssignIds, 
      AttributeAssignType attributeAssignType, AttributeDefType attributeDefType, Boolean enabled);

  /**
   * find assignments on assignments.  Note, it is assumed the current user can read the assignments passed in (and other underlying objects),
   * so only the attributeDefs of the assignments on assignments are checked for security
   * @param attributeAssigns to find assignments on these assignments
   * @param attributeAssignType of the assignments we are looking for or null for all
   * @param enabled null for all, true for enabled only, false for disabled only
   * @param attributeCheckReadOnAttributeDef if check read on attribute def
   * @return the assignments
   */
  public Set findAssignmentsOnAssignments(Collection attributeAssigns, 
      AttributeAssignType attributeAssignType, Boolean enabled, Boolean attributeCheckReadOnAttributeDef);

  /**
   * find assignments on assignments.  Note, it is assumed the current user can read the assignments passed in (and other underlying objects),
   * so only the attributeDefs of the assignments on assignments are checked for security
   * @param attributeAssignIds to find assignments on these assignment ids
   * @param attributeAssignType of the assignments we are looking for
   * @param attributeDefType attr, perm, limit, or null for all
   * @param enabled null for all, true for enabled only, false for disabled only
   * @param attributeCheckReadOnAttributeDef if check read on attribute def
   * @return the assignments
   */
  public Set findAssignmentsOnAssignmentsByIds(Collection attributeAssignIds, 
      AttributeAssignType attributeAssignType, AttributeDefType attributeDefType, Boolean enabled, Boolean attributeCheckReadOnAttributeDef);

  /**
   * securely search for attribute def names.  need to pass in either the assign ids, def ids, def name ids, or group ids
   * cannot have more than 100 bind variables
   * @param attributeAssignIds
   * @param attributeDefIds optional
   * @param attributeDefNameIds mutually exclusive with attributeDefIds
   * @param groupIds optional
   * @param actions (null means all actions)
   * @param enabled (null means all, true means enabled, false means disabled)
   * @return the assignments
   */
  public Set findGroupAttributeDefNames(
      Collection attributeAssignIds,
      Collection attributeDefIds, 
      Collection attributeDefNameIds,
      Collection groupIds, Collection actions, Boolean enabled);

  /**
   * securely search for attribute def names.  need to pass in either the assign ids, def ids, def name ids, or member ids
   * cannot have more than 100 bind variables
   * @param attributeAssignIds
   * @param attributeDefIds optional
   * @param attributeDefNameIds mutually exclusive with attributeDefIds
   * @param memberIds optional
   * @param actions (null means all actions)
   * @param enabled (null means all, true means enabled, false means disabled)
   * @return the assignments
   */
  public Set findMemberAttributeDefNames(
      Collection attributeAssignIds,
      Collection attributeDefIds, 
      Collection attributeDefNameIds,
      Collection memberIds, Collection actions, 
      Boolean enabled);

  /**
   * securely search for attribute def names.  need to pass in either the assign ids, def ids, def name ids, or membership ids
   * cannot have more than 100 bind variables
   * @param attributeAssignIds
   * @param attributeDefIds optional
   * @param attributeDefNameIds mutually exclusive with attributeDefIds
   * @param membershipIds optional
   * @param actions (null means all actions)
   * @param enabled (null means all, true means enabled, false means disabled)
   * @return the assignments
   */
  public Set findMembershipAttributeDefNames(
      Collection attributeAssignIds,
      Collection attributeDefIds, 
      Collection attributeDefNameIds,
      Collection membershipIds, Collection actions, 
      Boolean enabled);

  /**
   * securely search for attribute def names.  need to pass in either the assign ids, def ids, def name ids, or stem ids
   * cannot have more than 100 bind variables
   * @param attributeAssignIds
   * @param attributeDefIds optional
   * @param attributeDefNameIds mutually exclusive with attributeDefIds
   * @param stemIds optional
   * @param actions (null means all actions)
   * @param enabled (null means all, true means enabled, false means disabled)
   * @return the assignments
   */
  public Set findStemAttributeDefNames(
      Collection attributeAssignIds,
      Collection attributeDefIds, 
      Collection attributeDefNameIds,
      Collection stemIds, Collection actions, 
      Boolean enabled);

  /**
   * securely search for attribute def names.  need to pass in either the assign ids, def ids, def name ids, or membership ids
   * cannot have more than 100 bind variables
   * @param attributeAssignIds
   * @param attributeDefIds optional
   * @param attributeDefNameIds mutually exclusive with attributeDefIds
   * @param groupIdsAndMemberIds optional
   * @param actions (null means all actions)
   * @param enabled (null means all, true means enabled, false means disabled)
   * @return the assignments
   */
  public Set findAnyMembershipAttributeDefNames(
      Collection attributeAssignIds,
      Collection attributeDefIds, 
      Collection attributeDefNameIds,
      Collection groupIdsAndMemberIds, Collection actions, 
      Boolean enabled);

  /**
   * securely search for attributeDefNames.  need to pass in either the assign ids, def ids, def name ids, or attribute def assign to ids
   * cannot have more than 100 bind variables
   * @param attributeAssignIds
   * @param attributeDefIds optional
   * @param attributeDefNameIds mutually exclusive with attributeDefIds
   * @param attributeDefAssignToIds optional
   * @param actions (null means all actions)
   * @param enabled (null means all, true means enabled, false means disabled)
   * @return the assignments
   */
  public Set findAttributeDefAttributeDefNames(
      Collection attributeAssignIds,
      Collection attributeDefIds, 
      Collection attributeDefNameIds,
      Collection attributeDefAssignToIds, Collection actions, 
      Boolean enabled);

  /**
   * find by attribute name and value
   * @param attributeDefNameId
   * @param value
   * @param queryOptions
   * @return the attribute assigns that match
   */
  public Set findByAttributeDefNameAndValueString(String attributeDefNameId, String value, QueryOptions queryOptions);

  /**
   * securely search for assignments
   * @param attributeAssignType
   * @param attributeDefId optional
   * @param attributeDefNameId mutually exclusive with attributeDefIds
   * @param ownerGroupId optional
   * @param ownerStemId optional
   * @param ownerMemberId optional
   * @param ownerAttributeDefId optional
   * @param ownerMembershipId optional
   * @param enabled (null means all, true means enabled, false means disabled)
   * @param includeAssignmentsOnAssignments if assignments on assignments should also be included
   * @return the assignments
   */
  public Set findAttributeAssignments(
      AttributeAssignType attributeAssignType, String attributeDefId, String attributeDefNameId,
      String ownerGroupId, String ownerStemId, String ownerMemberId, String ownerAttributeDefId,
      String ownerMembershipId,
      Boolean enabled, boolean includeAssignmentsOnAssignments);
  
  /**
   * search for assignments on assignments attribute def names
   * @param attributeAssigns to search on
   * @param attributeAssignType
   * @param enabled null for all...
   * @return the attribute def names
   */
  public Set findAssignmentsOnAssignmentsAttributeDefNames(
      Collection attributeAssigns,
      AttributeAssignType attributeAssignType, Boolean enabled);

  /**
   * securely search for assignments.  need to pass in either the assign ids, def ids, def name ids, or attribute def assign to ids
   * cannot have more than 100 bind variables
   * @param attributeAssignIds
   * @param attributeDefIds optional
   * @param attributeDefNameIds mutually exclusive with attributeDefIds
   * @param attributeDefAssignToIds optional
   * @param actions (null means all actions)
   * @param enabled (null means all, true means enabled, false means disabled)
   * @param attributeDefType attr, perm, limit, or null for all
   * @param includeAssignmentsOnAssignments if assignments on assignments should also be included
   * @param attributeDefValueType required if sending theValue, can be:
   * floating, integer, memberId, string, timestamp
   * @param theValue value if you are passing in one attributeDefNameLookup
   * @return the assignments
   */
  public Set findAttributeDefAttributeAssignments(
      Collection attributeAssignIds,
      Collection attributeDefIds, 
      Collection attributeDefNameIds,
      Collection attributeDefAssignToIds, Collection actions, 
      Boolean enabled, boolean includeAssignmentsOnAssignments, AttributeDefType attributeDefType,
      AttributeDefValueType attributeDefValueType, Object theValue);

  /**
   * 
   * @param attributeAssignIds
   * @param attributeDefIds
   * @param attributeDefNameIds
   * @param ownerAttributeDefIds
   * @param actions
   * @param enabled
   * @param includeAssignmentsOnAssignments
   * @param attributeDefType
   * @param attributeDefValueType
   * @param theValue
   * @param attributeCheckReadOnAttributeDef 
   * @param idOfAttributeDefNameOnAssignment id of attribute def name that there is an assignment on assignment of with a value
   * @param attributeValuesOnAssignment values that the attribute def name on assignment of assignment has
   * @param idOfAttributeDefNameOnAssignment2 second id of attribute def name that there is an assignment on assignment of with a value
   * @param attributeValuesOnAssignment2 second values that the attribute def name on assignment of assignment has
   * @return the set of attribute assignments
   */
  public Set findAttributeDefAttributeAssignments(Collection attributeAssignIds,
      Collection attributeDefIds, Collection attributeDefNameIds,
      Collection ownerAttributeDefIds, Collection actions, Boolean enabled, boolean includeAssignmentsOnAssignments,
      AttributeDefType attributeDefType,
      AttributeDefValueType attributeDefValueType, Object theValue, Boolean attributeCheckReadOnAttributeDef, 
      final String idOfAttributeDefNameOnAssignment, Set attributeValuesOnAssignment,
      final String idOfAttributeDefNameOnAssignment2, Set attributeValuesOnAssignment2);

  /**
   * securely search for assignments.  need to pass in either the assign ids, def ids, def name ids, or membership ids
   * cannot have more than 100 bind variables
   * @param attributeAssignIds
   * @param attributeDefIds optional
   * @param attributeDefNameIds mutually exclusive with attributeDefIds
   * @param groupIdsAndMemberIds optional
   * @param actions (null means all actions)
   * @param enabled (null means all, true means enabled, false means disabled)
   * @param includeAssignmentsOnAssignments if assignments on assignments should also be included
   * @param attributeDefType attr, perm, limit, or null for all
   * @param attributeDefValueType required if sending theValue, can be:
   * floating, integer, memberId, string, timestamp
   * @param theValue value if you are passing in one attributeDefNameLookup
   * then get the assignment which tells you the owner as well
   * @return the assignments
   */
  public Set findAnyMembershipAttributeAssignments(
      Collection attributeAssignIds,
      Collection attributeDefIds, 
      Collection attributeDefNameIds,
      Collection groupIdsAndMemberIds, Collection actions, 
      Boolean enabled, boolean includeAssignmentsOnAssignments, AttributeDefType attributeDefType,
      AttributeDefValueType attributeDefValueType, Object theValue);

  /**
   * securely search for assignments.  need to pass in either the assign ids, def ids, def name ids, or group ids
   * cannot have more than 100 bind variables
   * @param attributeAssignIds
   * @param attributeDefIds optional
   * @param attributeDefNameIds mutually exclusive with attributeDefIds
   * @param groupIds optional
   * @param actions (null means all actions)
   * @param enabled (null means all, true means enabled, false means disabled)
   * @param includeAssignmentsOnAssignments if assignments on assignments should also be included
   * @param attributeDefType null for all, or specify a type e.g. AttributeDefType.limit
   * @param attributeDefValueType required if sending theValue, can be:
   * floating, integer, memberId, string, timestamp
   * @param theValue value if you are passing in one attributeDefNameLookup
   * then get the assignment which tells you the owner as well
   * @return the assignments
   */
  public Set findGroupAttributeAssignments(
      Collection attributeAssignIds,
      Collection attributeDefIds, 
      Collection attributeDefNameIds,
      Collection groupIds, 
      Collection actions, 
      Boolean enabled, 
      boolean includeAssignmentsOnAssignments,
      AttributeDefType attributeDefType,
      AttributeDefValueType attributeDefValueType, Object theValue);

  /**
   * securely search for assignments.  need to pass in either the assign ids, def ids, def name ids, or group ids
   * cannot have more than 100 bind variables
   * @param attributeAssignIds
   * @param attributeDefIds optional
   * @param attributeDefNameIds mutually exclusive with attributeDefIds
   * @param groupIds optional
   * @param actions (null means all actions)
   * @param enabled (null means all, true means enabled, false means disabled)
   * @param includeAssignmentsOnAssignments if assignments on assignments should also be included
   * @param attributeDefType null for all, or specify a type e.g. AttributeDefType.limit
   * @param attributeDefValueType required if sending theValue, can be:
   * floating, integer, memberId, string, timestamp
   * @param theValue value if you are passing in one attributeDefNameLookup
   * then get the assignment which tells you the owner as well
   * @param attributeCheckReadOnAttributeDef if security should be checked on attribute def
   * @return the assignments
   */
  public Set findGroupAttributeAssignments(
      Collection attributeAssignIds,
      Collection attributeDefIds, 
      Collection attributeDefNameIds,
      Collection groupIds, 
      Collection actions, 
      Boolean enabled, 
      boolean includeAssignmentsOnAssignments,
      AttributeDefType attributeDefType,
      AttributeDefValueType attributeDefValueType, Object theValue, boolean attributeCheckReadOnAttributeDef);

  /**
   * securely search for assignments.  need to pass in either the assign ids, def ids, def name ids, or group ids
   * cannot have more than 100 bind variables
   * @param attributeAssignIds
   * @param attributeDefIds optional
   * @param attributeDefNameIds mutually exclusive with attributeDefIds
   * @param groupIds optional
   * @param actions (null means all actions)
   * @param enabled (null means all, true means enabled, false means disabled)
   * @param includeAssignmentsOnAssignments if assignments on assignments should also be included
   * @param attributeDefType null for all, or specify a type e.g. AttributeDefType.limit
   * @param attributeDefValueType required if sending theValue, can be:
   * floating, integer, memberId, string, timestamp
   * @param theValue value if you are passing in one attributeDefNameLookup
   * then get the assignment which tells you the owner as well
   * @param attributeCheckReadOnAttributeDef if security should be checked on attribute def
   * @param idOfAttributeDefNameOnAssignment id of attribute def name that there is an assignment on assignment of with a value
   * @param attributeValuesOnAssignment values that the attribute def name on assignment of assignment has
   * @param idOfAttributeDefNameOnAssignment2 second id of attribute def name that there is an assignment on assignment of with a value
   * @param attributeValuesOnAssignment2 second values that the attribute def name on assignment of assignment has
   * @return the assignments
   */
  public Set findGroupAttributeAssignments(
      Collection attributeAssignIds,
      Collection attributeDefIds, 
      Collection attributeDefNameIds,
      Collection groupIds, 
      Collection actions, 
      Boolean enabled, 
      boolean includeAssignmentsOnAssignments,
      AttributeDefType attributeDefType,
      AttributeDefValueType attributeDefValueType, Object theValue, boolean attributeCheckReadOnAttributeDef, 
      final String idOfAttributeDefNameOnAssignment, Set attributeValuesOnAssignment,
  final String idOfAttributeDefNameOnAssignment2, Set attributeValuesOnAssignment2);
  
  /**
   * securely search for assignments.  need to pass in either the assign ids, def ids, def name ids, or group ids
   * cannot have more than 100 bind variables
   * @param attributeAssignIds
   * @param attributeDefIds optional
   * @param attributeDefNameIds mutually exclusive with attributeDefIds
   * @param memberIds optional
   * @param actions (null means all actions)
   * @param enabled (null means all, true means enabled, false means disabled)
   * @param includeAssignmentsOnAssignments if assignments on assignments should also be included
   * @param attributeDefType null for all, or specify a type e.g. AttributeDefType.limit
   * @param attributeDefValueType required if sending theValue, can be:
   * floating, integer, memberId, string, timestamp
   * @param theValue value if you are passing in one attributeDefNameLookup
   * then get the assignment which tells you the owner as well
   * @param attributeCheckReadOnAttributeDef if security should be checked on attribute def
   * @param idOfAttributeDefNameOnAssignment id of attribute def name that there is an assignment on assignment of with a value
   * @param attributeValuesOnAssignment values that the attribute def name on assignment of assignment has
   * @param idOfAttributeDefNameOnAssignment2 second id of attribute def name that there is an assignment on assignment of with a value
   * @param attributeValuesOnAssignment2 second values that the attribute def name on assignment of assignment has
   * @return the assignments
   */
  public Set findMemberAttributeAssignments(
      Collection attributeAssignIds,
      Collection attributeDefIds, 
      Collection attributeDefNameIds,
      Collection memberIds, 
      Collection actions, 
      Boolean enabled, 
      boolean includeAssignmentsOnAssignments,
      AttributeDefType attributeDefType,
      AttributeDefValueType attributeDefValueType, Object theValue, boolean attributeCheckReadOnAttributeDef, 
      final String idOfAttributeDefNameOnAssignment, Set attributeValuesOnAssignment,
  final String idOfAttributeDefNameOnAssignment2, Set attributeValuesOnAssignment2);
  
  /**
   * securely search for assignments.  need to pass in either the assign ids, def ids, def name ids, or group ids
   * cannot have more than 100 bind variables
   * @param attributeDefIds optional
   * @param attributeDefNameIds mutually exclusive with attributeDefIds
   * @param actions (null means all actions)
   * @param enabled (null means all, true means enabled, false means disabled)
   * @param checkAttributeReadOnGroup 
   * @param attributeCheckReadOnAttributeDef
   * @param queryOptions 
   * @param retrieveValues
   * @param includeAssignmentsOnAssignments if include assignments on assignments
   * @param filter filter if filtering by group info
   * @param splitFilter true (default) if filter has spaces, split and look for all anywhere
   * @return attrdefs, attrdefnames, groups, assignments and optionally set of values
   */
  public Set findGroupAttributeAssignmentsByAttribute(
      Collection attributeDefIds, 
      Collection attributeDefNameIds,
      Collection actions, 
      Boolean enabled, 
      Boolean checkAttributeReadOnGroup, Boolean attributeCheckReadOnAttributeDef, 
      QueryOptions queryOptions, boolean retrieveValues, boolean includeAssignmentsOnAssignments, String filter, Boolean splitFilter);
  
  /**
   * securely search for assignments.  need to pass in either the assign ids, def ids, def name ids, or group ids
   * cannot have more than 100 bind variables
   * @param attributeDefIds optional
   * @param attributeDefNameIds mutually exclusive with attributeDefIds
   * @param actions (null means all actions)
   * @param enabled (null means all, true means enabled, false means disabled)
   * @param checkAttributeReadOnGroup 
   * @param attributeCheckReadOnAttributeDef
   * @param queryOptions 
   * @param retrieveValues
   * @param filter filter if filtering by group info
   * @param splitFilter true (default) if filter has spaces, split and look for all anywhere
   * @return attr defs, attr def names, groups and assignments and optionally set of values
   */
  public Set findGroupAttributeAssignmentsOnAssignmentsByAttribute(
      Collection attributeDefIds, 
      Collection attributeDefNameIds,
      Collection actions, 
      Boolean enabled, 
      Boolean checkAttributeReadOnGroup, Boolean attributeCheckReadOnAttributeDef, 
      QueryOptions queryOptions, boolean retrieveValues, String filter, Boolean splitFilter);
  
  /**
   * securely search for assignments.  need to pass in either the assign ids, def ids, def name ids
   * cannot have more than 100 bind variables
   * @param attributeDefIds optional
   * @param attributeDefNameIds mutually exclusive with attributeDefIds
   * @param actions (null means all actions)
   * @param enabled (null means all, true means enabled, false means disabled)
   * @param checkAttributeReadOnGroup 
   * @param attributeCheckReadOnAttributeDef
   * @param queryOptions 
   * @param retrieveValues
   * @param filter filter if filtering by group info
   * @param splitFilter true (default) if filter has spaces, split and look for all anywhere
   * @return attr defs, attr def names, stems and assignments and optionally set of values
   */
  public Set findStemAttributeAssignmentsOnAssignmentsByAttribute(
      Collection attributeDefIds, 
      Collection attributeDefNameIds,
      Collection actions, 
      Boolean enabled, 
      Boolean checkAttributeReadOnGroup, Boolean attributeCheckReadOnAttributeDef, 
      QueryOptions queryOptions, boolean retrieveValues, String filter, Boolean splitFilter);
  
  /**
   * securely search for assignments.  need to pass in either the assign ids, def ids, def name ids
   * cannot have more than 100 bind variables
   * @param attributeDefIds optional
   * @param attributeDefNameIds mutually exclusive with attributeDefIds
   * @param actions (null means all actions)
   * @param enabled (null means all, true means enabled, false means disabled)
   * @param checkAttributeReadOnOwnerAttributeDef 
   * @param attributeCheckReadOnAttributeDef
   * @param queryOptions 
   * @param retrieveValues
   * @param filter filter if filtering by group info
   * @param splitFilter true (default) if filter has spaces, split and look for all anywhere
   * @return attr defs, attr def names, stems and assignments and optionally set of values
   */
  public Set findAttributeDefAttributeAssignmentsOnAssignmentsByAttribute(
      Collection attributeDefIds, 
      Collection attributeDefNameIds,
      Collection actions, 
      Boolean enabled, 
      Boolean checkAttributeReadOnOwnerAttributeDef, Boolean attributeCheckReadOnAttributeDef, 
      QueryOptions queryOptions, boolean retrieveValues, String filter, Boolean splitFilter);
  
  /**
   * securely search for assignments.  need to pass in either the assign ids, def ids, def name ids, or member ids
   * cannot have more than 100 bind variables
   * @param attributeAssignIds
   * @param attributeDefIds optional
   * @param attributeDefNameIds mutually exclusive with attributeDefIds
   * @param memberIds optional
   * @param actions (null means all actions)
   * @param enabled (null means all, true means enabled, false means disabled)
   * @param includeAssignmentsOnAssignments if assignments on assignments should also be included
   * @param attributeDefType null for all, or specify a type e.g. AttributeDefType.limit
   * @param attributeDefValueType required if sending theValue, can be:
   * floating, integer, memberId, string, timestamp
   * @param theValue value if you are passing in one attributeDefNameLookup
   * @return the assignments
   */
  public Set findMemberAttributeAssignments(
      Collection attributeAssignIds,
      Collection attributeDefIds, 
      Collection attributeDefNameIds,
      Collection memberIds, Collection actions, 
      Boolean enabled, boolean includeAssignmentsOnAssignments,
      AttributeDefType attributeDefType, 
      AttributeDefValueType attributeDefValueType, Object theValue);

  /**
   * securely search for assignments.  need to pass in either the assign ids, def ids, def name ids, or membership ids
   * cannot have more than 100 bind variables
   * @param attributeAssignIds
   * @param attributeDefIds optional
   * @param attributeDefNameIds mutually exclusive with attributeDefIds
   * @param membershipIds optional
   * @param actions (null means all actions)
   * @param enabled (null means all, true means enabled, false means disabled)
   * @param includeAssignmentsOnAssignments if assignments on assignments should also be included
   * @param attributeDefType null for all, or specify a type e.g. AttributeDefType.limit
   * @param attributeDefValueType required if sending theValue, can be:
   * floating, integer, memberId, string, timestamp
   * @param theValue value if you are passing in one attributeDefNameLookup
   * then get the assignment which tells you the owner as well
   * @return the assignments
   */
  public Set findMembershipAttributeAssignments(
      Collection attributeAssignIds,
      Collection attributeDefIds, 
      Collection attributeDefNameIds,
      Collection membershipIds, Collection actions, 
      Boolean enabled, boolean includeAssignmentsOnAssignments,
      AttributeDefType attributeDefType, 
      AttributeDefValueType attributeDefValueType, Object theValue);

  /**
   * securely search for assignments on assignments of stems. 
   * need to pass in either the assign ids, def ids, def name ids, or stem ids
   * cannot have more than 100 bind variables
   * @param attributeAssignIds
   * @param attributeDefIds optional
   * @param attributeDefNameIds mutually exclusive with attributeDefIds
   * @param stemIds optional
   * @param actions (null means all actions)
   * @param enabled (null means all, true means enabled, false means disabled)
   * @param attributeDefType null for all, or specify a type e.g. AttributeDefType.limit
   * @param attributeDefValueType required if sending theValue, can be:
   * floating, integer, memberId, string, timestamp
   * @param theValue value if you are passing in one attributeDefNameLookup
   * @param includeAssignmentsFromAssignments T|F if you are finding an assignment that is an assignmentOnAssignment,
   * then get the assignment which tells you the owner as well
   * @param ownerAttributeAssignIds attribute assignment ids of the owner assignments (where the attributes are assigned to)
   * @param ownerAttributeDefIds attribute definition ids of the owner assignments (where the attributes are assigned to)
   * @param ownerAttributeDefNameIds attribute definition names ids of the owner assignments (where the attributes are assigned to)
   * @param ownerActions actions of the owner assignment
   * @param useCache to use a cache or not
   * @return the assignments
   */
  public Set findStemAttributeAssignmentsOnAssignments(
      Collection attributeAssignIds,
      Collection attributeDefIds, 
      Collection attributeDefNameIds,
      Collection stemIds, Collection actions, 
      Boolean enabled, 
      AttributeDefType attributeDefType,
      AttributeDefValueType attributeDefValueType,
      Object theValue, boolean includeAssignmentsFromAssignments,
      Collection ownerAttributeAssignIds,
      Collection ownerAttributeDefIds, 
      Collection ownerAttributeDefNameIds,
      Collection ownerActions, boolean useCache);

  /**
   * find assignments from assignments.  Note, it is assumed the current user can read the assignments passed in (and other underlying objects),
   * so only the attributeDefs of the assignments on assignments are checked for security
   * @param attributeAssigns to find assignments on these assignments
   * @param attributeAssignType of the assignments we are looking for or null for all
   * @param enabled null for all, true for enabled only, false for disabled only
   * @param useCache 
   * @return the assignments
   */
  public Set findAssignmentsFromAssignments(Collection attributeAssigns, 
      AttributeAssignType attributeAssignType, Boolean enabled, boolean useCache);

  /**
   * find assignments from assignments.  Note, it is assumed the current user can read the assignments passed in (and other underlying objects),
   * so only the attributeDefs of the assignments on assignments are checked for security
   * @param attributeAssignIds to find assignments on these assignment ids
   * @param attributeAssignType of the assignments we are looking for
   * @param attributeDefType attr, perm, limit, or null for all
   * @param enabled null for all, true for enabled only, false for disabled only
   * @return the assignments
   */
  public Set findAssignmentsFromAssignmentsByIds(Collection attributeAssignIds, 
      AttributeAssignType attributeAssignType, AttributeDefType attributeDefType, Boolean enabled);

  /**
   * find attribute assignments by ids, this is not a secure method, any ids passed in will be returned if they exist
   * @param ids no limit on number of ids passed
   * @param enabled true to find enabled only, false to return disabled only
   * @param useCache true to use a cache for the query, false if not
   * @return the results never null
   */
  public Set findByIds(Collection ids, Boolean enabled, boolean useCache);

  /**
   * securely search for assignments on assignments of members. 
   * need to pass in either the assign ids, def ids, def name ids, or member ids
   * cannot have more than 100 bind variables
   * @param attributeAssignIds
   * @param attributeDefIds optional
   * @param attributeDefNameIds mutually exclusive with attributeDefIds
   * @param memberIds optional
   * @param actions (null means all actions)
   * @param enabled (null means all, true means enabled, false means disabled)
   * @param attributeDefType null for all, or specify a type e.g. AttributeDefType.limit
   * @param attributeDefValueType required if sending theValue, can be:
   * floating, integer, memberId, string, timestamp
   * @param theValue value if you are passing in one attributeDefNameLookup
   * @param includeAssignmentsFromAssignments T|F if you are finding an assignment that is an assignmentOnAssignment,
   * then get the assignment which tells you the owner as well
   * @param ownerAttributeAssignIds attribute assignment ids of the owner assignments (where the attributes are assigned to)
   * @param ownerAttributeDefIds attribute definition ids of the owner assignments (where the attributes are assigned to)
   * @param ownerAttributeDefNameIds attribute definition names ids of the owner assignments (where the attributes are assigned to)
   * @param ownerActions actions of the owner assignment
   * @param useCache to use a cache or not
   * @return the assignments
   */
  public Set findMemberAttributeAssignmentsOnAssignments(
      Collection attributeAssignIds,
      Collection attributeDefIds, 
      Collection attributeDefNameIds,
      Collection memberIds, Collection actions, 
      Boolean enabled, AttributeDefType attributeDefType, AttributeDefValueType attributeDefValueType,
      Object theValue, boolean includeAssignmentsFromAssignments,
      Collection ownerAttributeAssignIds,
      Collection ownerAttributeDefIds, 
      Collection ownerAttributeDefNameIds,
      Collection ownerActions, boolean useCache);

  /**
   * securely search for assignments on assignments of groups. 
   * need to pass in either the assign ids, def ids, def name ids, or stem ids
   * cannot have more than 100 bind variables
   * @param attributeAssignIds
   * @param attributeDefIds optional
   * @param attributeDefNameIds mutually exclusive with attributeDefIds
   * @param groupIds optional
   * @param actions (null means all actions)
   * @param enabled (null means all, true means enabled, false means disabled)
   * @param attributeDefType null for all, or specify a type e.g. AttributeDefType.limit
   * @param attributeDefValueType required if sending theValue, can be:
   * floating, integer, memberId, string, timestamp
   * @param theValue value if you are passing in one attributeDefNameLookup
   * @param includeAssignmentsFromAssignments T|F if you are finding an assignment that is an assignmentOnAssignment,
   * then get the assignment which tells you the owner as well
   * @param ownerAttributeAssignIds attribute assignment ids of the owner assignments (where the attributes are assigned to)
   * @param ownerAttributeDefIds attribute definition ids of the owner assignments (where the attributes are assigned to)
   * @param ownerAttributeDefNameIds attribute definition names ids of the owner assignments (where the attributes are assigned to)
   * @param ownerActions actions of the owner assignment
   * @param useCache to use a cache or not
   * @return the assignments
   */
  public Set findGroupAttributeAssignmentsOnAssignments(
      Collection attributeAssignIds,
      Collection attributeDefIds, 
      Collection attributeDefNameIds,
      Collection groupIds, Collection actions, 
      Boolean enabled, 
      AttributeDefType attributeDefType,
      AttributeDefValueType attributeDefValueType,
      Object theValue, boolean includeAssignmentsFromAssignments,
      Collection ownerAttributeAssignIds,
      Collection ownerAttributeDefIds, 
      Collection ownerAttributeDefNameIds,
      Collection ownerActions, boolean useCache);

  /**
   * securely search for assignments on assignments of attribute defs. 
   * need to pass in either the assign ids, def ids, def name ids, or stem ids
   * cannot have more than 100 bind variables
   * @param attributeAssignIds
   * @param attributeDefIds optional
   * @param attributeDefNameIds mutually exclusive with attributeDefIds
   * @param mainOwnerAttributeDefIds optional
   * @param actions (null means all actions)
   * @param enabled (null means all, true means enabled, false means disabled)
   * @param attributeDefType null for all, or specify a type e.g. AttributeDefType.limit
   * @param attributeDefValueType required if sending theValue, can be:
   * floating, integer, memberId, string, timestamp
   * @param theValue value if you are passing in one attributeDefNameLookup
   * @param includeAssignmentsFromAssignments T|F if you are finding an assignment that is an assignmentOnAssignment,
   * then get the assignment which tells you the owner as well
   * @param ownerAttributeAssignIds attribute assignment ids of the owner assignments (where the attributes are assigned to)
   * @param ownerAttributeDefIds attribute definition ids of the owner assignments (where the attributes are assigned to)
   * @param ownerAttributeDefNameIds attribute definition names ids of the owner assignments (where the attributes are assigned to)
   * @param ownerActions actions of the owner assignment
   * @param useCache to use a cache or not
   * @return the assignments
   */
  public Set findAttributeDefAttributeAssignmentsOnAssignments(
      Collection attributeAssignIds,
      Collection attributeDefIds, 
      Collection attributeDefNameIds,
      Collection mainOwnerAttributeDefIds, Collection actions, 
      Boolean enabled, 
      AttributeDefType attributeDefType,
      AttributeDefValueType attributeDefValueType,
      Object theValue, boolean includeAssignmentsFromAssignments,
      Collection ownerAttributeAssignIds,
      Collection ownerAttributeDefIds, 
      Collection ownerAttributeDefNameIds,
      Collection ownerActions, boolean useCache);

  /**
   * securely search for assignments on assignments of immediate memberships. 
   * need to pass in either the assign ids, def ids, def name ids, or imm membership ids
   * cannot have more than 100 bind variables
   * @param attributeAssignIds
   * @param attributeDefIds optional
   * @param attributeDefNameIds mutually exclusive with attributeDefIds
   * @param membershipIds optional
   * @param actions (null means all actions)
   * @param enabled (null means all, true means enabled, false means disabled)
   * @param attributeDefType null for all, or specify a type e.g. AttributeDefType.limit
   * @param attributeDefValueType required if sending theValue, can be:
   * floating, integer, memberId, string, timestamp
   * @param theValue value if you are passing in one attributeDefNameLookup
   * @param includeAssignmentsFromAssignments T|F if you are finding an assignment that is an assignmentOnAssignment,
   * then get the assignment which tells you the owner as well
   * @param ownerAttributeAssignIds attribute assignment ids of the owner assignments (where the attributes are assigned to)
   * @param ownerAttributeDefIds attribute definition ids of the owner assignments (where the attributes are assigned to)
   * @param ownerAttributeDefNameIds attribute definition names ids of the owner assignments (where the attributes are assigned to)
   * @param ownerActions actions of the owner assignment
   * @param useCache to use a cache or not
   * @return the assignments
   */
  public Set findMembershipAttributeAssignmentsOnAssignments(
      Collection attributeAssignIds,
      Collection attributeDefIds, 
      Collection attributeDefNameIds,
      Collection membershipIds, Collection actions, 
      Boolean enabled, 
      AttributeDefType attributeDefType,
      AttributeDefValueType attributeDefValueType,
      Object theValue, boolean includeAssignmentsFromAssignments,
      Collection ownerAttributeAssignIds,
      Collection ownerAttributeDefIds, 
      Collection ownerAttributeDefNameIds,
      Collection ownerActions, boolean useCache);

  /**
   * securely search for assignments on assignments of effective memberships (or immediate). 
   * need to pass in either the assign ids, def ids, def name ids, or imm membership ids
   * cannot have more than 100 bind variables
   * @param attributeAssignIds
   * @param attributeDefIds optional
   * @param attributeDefNameIds mutually exclusive with attributeDefIds
   * @param groupIdsAndMemberIds optional
   * @param actions (null means all actions)
   * @param enabled (null means all, true means enabled, false means disabled)
   * @param attributeDefType null for all, or specify a type e.g. AttributeDefType.limit
   * @param attributeDefValueType required if sending theValue, can be:
   * floating, integer, memberId, string, timestamp
   * @param theValue value if you are passing in one attributeDefNameLookup
   * @param includeAssignmentsFromAssignments T|F if you are finding an assignment that is an assignmentOnAssignment,
   * then get the assignment which tells you the owner as well
   * @param ownerAttributeAssignIds attribute assignment ids of the owner assignments (where the attributes are assigned to)
   * @param ownerAttributeDefIds attribute definition ids of the owner assignments (where the attributes are assigned to)
   * @param ownerAttributeDefNameIds attribute definition names ids of the owner assignments (where the attributes are assigned to)
   * @param ownerActions actions of the owner assignment
   * @param useCache to use a cache or not
   * @return the assignments
   */
  public Set findAnyMembershipAttributeAssignmentsOnAssignments(
      Collection attributeAssignIds,
      Collection attributeDefIds, 
      Collection attributeDefNameIds,
      Collection groupIdsAndMemberIds, Collection actions, 
      Boolean enabled, 
      AttributeDefType attributeDefType,
      AttributeDefValueType attributeDefValueType,
      Object theValue, boolean includeAssignmentsFromAssignments,
      Collection ownerAttributeAssignIds,
      Collection ownerAttributeDefIds, 
      Collection ownerAttributeDefNameIds,
      Collection ownerActions, boolean useCache);
 
  /**
   * Returns legacy group types (assigned to a given group) that were either migrated or created in the new attribute framework.
   * @param groupId
   * @return the values where the keys are the legacy group type names
   */
  public Map findLegacyGroupTypeAssignmentsByGroupId(String groupId);

  /**
   * securely search for assignments.  need to pass in either the assign ids, def ids, def name ids
   * cannot have more than 100 bind variables
   * @param attributeDefIds optional
   * @param attributeDefNameIds mutually exclusive with attributeDefIds
   * @param actions (null means all actions)
   * @param enabled (null means all, true means enabled, false means disabled)
   * @param checkAttributeReadOnStem 
   * @param attributeCheckReadOnAttributeDef
   * @param queryOptions 
   * @param retrieveValues
   * @param includeAssignmentsOnAssignments 
   * @param filter filter if filtering by group info
   * @param splitFilter true (default) if filter has spaces, split and look for all anywhere
   * @return attrdefs, attrdefnames, stems, assignments and optionally set of values
   */
  public Set findStemAttributeAssignmentsByAttribute(
      Collection attributeDefIds, 
      Collection attributeDefNameIds,
      Collection actions, 
      Boolean enabled, 
      Boolean checkAttributeReadOnStem, Boolean attributeCheckReadOnAttributeDef, 
      QueryOptions queryOptions, boolean retrieveValues, boolean includeAssignmentsOnAssignments, String filter, Boolean splitFilter);
  
  /**
   * securely search for assignments.  need to pass in either the assign ids, def ids, def name ids
   * cannot have more than 100 bind variables
   * @param attributeDefIds optional
   * @param attributeDefNameIds mutually exclusive with attributeDefIds
   * @param actions (null means all actions)
   * @param enabled (null means all, true means enabled, false means disabled)
   * @param checkAttributeReadOnOwnerAttributeDef 
   * @param attributeCheckReadOnAttributeDef
   * @param queryOptions 
   * @param retrieveValues
   * @param includeAssignmentsOnAssignments 
   * @param filter filter if filtering by group info
   * @param splitFilter true (default) if filter has spaces, split and look for all anywhere
   * @return attrdefs, attrdefnames, stems, assignments and optionally set of values
   */
  public Set findAttributeDefAttributeAssignmentsByAttribute(
      Collection attributeDefIds, 
      Collection attributeDefNameIds,
      Collection actions, 
      Boolean enabled, 
      Boolean checkAttributeReadOnOwnerAttributeDef, Boolean attributeCheckReadOnAttributeDef, 
      QueryOptions queryOptions, boolean retrieveValues, boolean includeAssignmentsOnAssignments, String filter, Boolean splitFilter);
  
  
  /**
   * securely search for assignments.  need to pass in either the assign ids, def ids, def name ids
   * cannot have more than 100 bind variables
   * @param attributeDefIds optional
   * @param attributeDefNameIds mutually exclusive with attributeDefIds
   * @param actions (null means all actions)
   * @param enabled (null means all, true means enabled, false means disabled)
   * @param attributeCheckReadOnAttributeDef
   * @param queryOptions 
   * @param retrieveValues
   * @param includeAssignmentsOnAssignments 
   * @param filter filter if filtering by group info
   * @param splitFilter true (default) if filter has spaces, split and look for all anywhere
   * @return attrdefs, attrdefnames, members, assignments and optionally set of values
   */
  public Set findMemberAttributeAssignmentsByAttribute(
      Collection attributeDefIds, 
      Collection attributeDefNameIds,
      Collection actions, 
      Boolean enabled, 
      Boolean attributeCheckReadOnAttributeDef, 
      QueryOptions queryOptions, boolean retrieveValues, boolean includeAssignmentsOnAssignments, String filter, Boolean splitFilter);

  /**
   * securely search for assignments.  need to pass in either the assign ids, def ids, def name ids, or group ids
   * cannot have more than 100 bind variables
   * @param attributeDefIds optional
   * @param attributeDefNameIds mutually exclusive with attributeDefIds
   * @param actions (null means all actions)
   * @param enabled (null means all, true means enabled, false means disabled)
   * @param attributeCheckReadOnAttributeDef
   * @param queryOptions 
   * @param retrieveValues
   * @param filter filter if filtering by group info
   * @param splitFilter true (default) if filter has spaces, split and look for all anywhere
   * @return attr defs, attr def names, stems and assignments and optionally set of values
   */
  public Set findMemberAttributeAssignmentsOnAssignmentsByAttribute(
      Collection attributeDefIds, 
      Collection attributeDefNameIds,
      Collection actions, 
      Boolean enabled, 
      Boolean attributeCheckReadOnAttributeDef, 
      QueryOptions queryOptions, boolean retrieveValues, String filter, Boolean splitFilter);

  /**
   * securely search for assignments.  need to pass in either the assign ids, def ids, def name ids, or group ids
   * cannot have more than 100 bind variables
   * @param attributeDefIds optional
   * @param attributeDefNameIds mutually exclusive with attributeDefIds
   * @param actions (null means all actions)
   * @param enabled (null means all, true means enabled, false means disabled)
   * @param checkAttributeReadOnGroup 
   * @param attributeCheckReadOnAttributeDef
   * @param queryOptions 
   * @param retrieveValues
   * @param includeAssignmentsOnAssignments if include assignments on assignments
   * @param filter filter if filtering by group info
   * @param splitFilter true (default) if filter has spaces, split and look for all anywhere
   * @return attrdefs, attrdefnames, groups/members/memberships array, assignments and optionally set of values
   */
  public Set findImmediateMembershipAttributeAssignmentsByAttribute(
      Collection attributeDefIds, 
      Collection attributeDefNameIds,
      Collection actions, 
      Boolean enabled, 
      Boolean checkAttributeReadOnGroup, Boolean attributeCheckReadOnAttributeDef, 
      QueryOptions queryOptions, boolean retrieveValues, boolean includeAssignmentsOnAssignments, String filter, Boolean splitFilter);

  /**
   * securely search for assignments.  need to pass in either the assign ids, def ids, def name ids, or group ids
   * cannot have more than 100 bind variables
   * @param attributeDefIds optional
   * @param attributeDefNameIds mutually exclusive with attributeDefIds
   * @param actions (null means all actions)
   * @param enabled (null means all, true means enabled, false means disabled)
   * @param checkAttributeReadOnGroup 
   * @param attributeCheckReadOnAttributeDef
   * @param queryOptions 
   * @param retrieveValues
   * @param filter filter if filtering by group info
   * @param splitFilter true (default) if filter has spaces, split and look for all anywhere
   * @return attr defs, attr def names, groups/members/memberships array, and assignments and optionally set of values
   */
  public Set findImmediateMembershipAttributeAssignmentsOnAssignmentsByAttribute(
      Collection attributeDefIds, 
      Collection attributeDefNameIds,
      Collection actions, 
      Boolean enabled, 
      Boolean checkAttributeReadOnGroup, Boolean attributeCheckReadOnAttributeDef, 
      QueryOptions queryOptions, boolean retrieveValues, String filter, Boolean splitFilter);

  /**
   * securely search for assignments.  need to pass in either the assign ids, def ids, def name ids, or group ids
   * cannot have more than 100 bind variables
   * @param attributeDefIds optional
   * @param attributeDefNameIds mutually exclusive with attributeDefIds
   * @param actions (null means all actions)
   * @param enabled (null means all, true means enabled, false means disabled)
   * @param checkAttributeReadOnGroup 
   * @param attributeCheckReadOnAttributeDef
   * @param queryOptions 
   * @param retrieveValues
   * @param filter filter if filtering by group info
   * @param splitFilter true (default) if filter has spaces, split and look for all anywhere
   * @return attr defs, attr def names, groups/members array, and assignments and optionally set of values
   */
  public Set findAnyMembershipAttributeAssignmentsOnAssignmentsByAttribute(
      Collection attributeDefIds, 
      Collection attributeDefNameIds,
      Collection actions, 
      Boolean enabled, 
      Boolean checkAttributeReadOnGroup, Boolean attributeCheckReadOnAttributeDef, 
      QueryOptions queryOptions, boolean retrieveValues, String filter, Boolean splitFilter);

  /**
   * securely search for assignments.  need to pass in either the assign ids, def ids, def name ids, or group ids
   * cannot have more than 100 bind variables
   * @param attributeDefIds optional
   * @param attributeDefNameIds mutually exclusive with attributeDefIds
   * @param actions (null means all actions)
   * @param enabled (null means all, true means enabled, false means disabled)
   * @param checkAttributeReadOnGroup 
   * @param attributeCheckReadOnAttributeDef
   * @param queryOptions 
   * @param retrieveValues
   * @param includeAssignmentsOnAssignments if include assignments on assignments
   * @param filter filter if filtering by group info
   * @param splitFilter true (default) if filter has spaces, split and look for all anywhere
   * @return attrdefs, attrdefnames, groups/members array, assignments and optionally set of values
   */
  public Set findAnyMembershipAttributeAssignmentsByAttribute(
      Collection attributeDefIds, 
      Collection attributeDefNameIds,
      Collection actions, 
      Boolean enabled, 
      Boolean checkAttributeReadOnGroup, Boolean attributeCheckReadOnAttributeDef, 
      QueryOptions queryOptions, boolean retrieveValues, boolean includeAssignmentsOnAssignments, String filter, Boolean splitFilter);

}
    
    
    
    

    




    
    
    © 2015 - 2024 Weber Informatics LLC | Privacy Policy