oracle.portal.provider.v1
Class DenyAllSecurityManager

java.lang.Object
  |
  +--oracle.portal.provider.v1.DenyAllSecurityManager

public class DenyAllSecurityManager

extends java.lang.Object

implements PortletSecurityManager

DefaultSecurityManager is a simple access controller for a portlet that uses a user's authentication level to control access. A user will be granted access to a portlet if his/her authentication level is greater than or equal to the security level that has been specified for the security manager.

If you do not specify a security level for the security manager, it will default to the most secure level of operation

Constructor Summary

DenyAllSecurityManager()

Method Summary

boolean	hasAccess(Portlet p, ProviderUser user) Verifies that the specified user's authentication level is greater than or equal to the specified security threshhold.
boolean	hasAccess(PortletReference ref, ProviderUser user) Verifies that the specified user's authentication level is greater than or equal to the specified security threshhold.

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

DenyAllSecurityManager

public DenyAllSecurityManager()

Method Detail

hasAccess

public boolean hasAccess(Portlet p,
                         ProviderUser user)

Verifies that the specified user's authentication level is greater than or equal to the specified security threshhold.

Specified by:

hasAccess in interface PortletSecurityManager

Parameters:

p - the portlet which we want to authorize access to.

user - the current user we are being asked to authorize.

Returns:

true is this user is authorized to access this portlet.

hasAccess

public boolean hasAccess(PortletReference ref,
                         ProviderUser user)
                  throws PortletNotFoundException

Verifies that the specified user's authentication level is greater than or equal to the specified security threshhold.

Specified by:

hasAccess in interface PortletSecurityManager

Parameters:

ref - portlet reference that identifies the instant

user - the current user we are being asked to authorize.

Returns:

true is this user is authorized to access this portlet instance.