/*  Copyright (c) 2000 by Oracle Corporation. All Rights Reserved. */

package oracle.portal.provider.v1;

/**
 * DefaultSecurityManager is a simple access controller for a portlet that uses
 * a user's authentication level to control access. A user will be granted
 * access to a portlet if his/her authentication level is greater than or
 * equal to the security level that has been specified for the security manager.
 * <p>If you do not specify a security level for the security manager, it will
 * default to the most secure level of operation
 */
public class DenyAllSecurityManager implements PortletSecurityManager
{
    /**
     *  Verifies that the specified user's authentication level is greater
     *  than or equal to the specified security threshhold.
     *
     *  @param  p the portlet which we want to authorize access to.
     *  @param  user the current user we are being asked to authorize.
     *  @return true is this user is authorized to access this portlet.
     */
    public boolean hasAccess(Portlet p, ProviderUser user)
    {
        return false;
    }

    /**
     *  Verifies that the specified user's authentication level is greater
     *  than or equal to the specified security threshhold.
     *
     *  @param  ref portlet reference that identifies the instant
     *  @param  user the current user we are being asked to authorize.
     *  @return true is this user is authorized to access this portlet instance.
     */
    public boolean hasAccess(PortletReference ref, ProviderUser user)
        throws PortletNotFoundException
    {
        return false;
    }

}

