org.fcrepo.auth.xacml.URIConstants Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of fcrepo-module-auth-xacml Show documentation
Fedora Repository XACML module
There is a newer version: 4.7.4
Show newest version
/*
 * Copyright 2015 DuraSpace, Inc.
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
package org.fcrepo.auth.xacml;

import java.net.URI;

import org.jboss.security.xacml.interfaces.XACMLConstants;


/**
 * URIs that are used in this module.
 *
 * @author Gregory Jansen
 */
public abstract class URIConstants {

    /**
     * ID of the subject (user principal).
     */
    public static final URI ATTRIBUTEID_SUBJECT_ID = URI
            .create(XACMLConstants.ATTRIBUTEID_SUBJECT_ID);

    /**
     * Roles
     */
    public static final String FCREPO_SUBJECT_ROLE_VALUE = "fcrepo-xacml:subject-role";
    public static final URI FCREPO_SUBJECT_ROLE = URI.create(FCREPO_SUBJECT_ROLE_VALUE);

    /**
     * Groups
     */
    public static final String FCREPO_SUBJECT_GROUP_VALUE = "fcrepo-xacml:subject-group";
    public static final URI FCREPO_SUBJECT_GROUP = URI.create(FCREPO_SUBJECT_GROUP_VALUE);

    /**
     * ID of the action (ModeShape permission name).
     */
    public static final URI ATTRIBUTEID_ACTION_ID = URI
            .create(XACMLConstants.ATTRIBUTEID_ACTION_ID);

    /**
     * ID of the resource (ModeShape node/property path).
     */
    public static final URI ATTRIBUTEID_RESOURCE_ID = URI
            .create(XACMLConstants.ATTRIBUTEID_RESOURCE_ID);

    /**
     * External URI of the resource (External Identifier).
     */
    public static final URI ATTRIBUTEID_RESOURCE_URI = URI.create("urn:fedora:xacml:2.0:resource:resource-uri");

    /**
     * ID of the ModeShape workspace for this resource.
     */
    public static final URI ATTRIBUTEID_RESOURCE_WORKSPACE = URI
            .create("urn:fedora:xacml:2.0:resource:resource-workspace");

    /**
     * Scope of the request (DESCENDANTS if "remove", IMMEDIATE otherwise).
     */
    public static final URI ATTRIBUTEID_RESOURCE_SCOPE = URI
            .create("urn:oasis:names:tc:xacml:1.0:resource:scope");

    public static final String XACML_POLICY_PROPERTY = "authz:policy";

    public static final String POLICY_URI_PREFIX = "info:fedora";

    /**
     * Original request IP, which may be forwarded by an application.
     */
    public static final URI ATTRIBUTEID_ENVIRONMENT_ORIGINAL_IP_ADDRESS = URI
            .create("urn:fedora:xacml:2.0:environment:original-ip-address");

}