org.apache.directory.server.core.authz.support

Class MostSpecificProtectedItemFilter

java.lang.Object

org.apache.directory.server.core.authz.support.MostSpecificProtectedItemFilter

All Implemented Interfaces:

ACITupleFilter

public class MostSpecificProtectedItemFilter
extends Object
implements ACITupleFilter

An ACITupleFilter that chooses the tuples with the most specific protected item. (18.8.4.3, X.501)

If more than one tuple remains, choose the tuples with the most specific protected item. If the protected item is an attribute and there are tuples that specify the attribute type explicitly, discard all other tuples. If the protected item is an attribute value, and there are tuples that specify the attribute value explicitly, discard all other tuples. A protected item which is a rangeOfValues is to be treated as specifying an attribute value explicitly.

Author:

Apache Directory Project

Field Summary

Fields inherited from interface org.apache.directory.server.core.authz.support.ACITupleFilter

ACI_LOG

Constructor Summary

Constructors

Constructor and Description
MostSpecificProtectedItemFilter()

Method Summary

Methods

Modifier and Type	Method and Description
Collection<org.apache.directory.api.ldap.aci.ACITuple>	filter(AciContext aciContext, OperationScope scope, org.apache.directory.api.ldap.model.entry.Entry userEntry) Returns the collection of the filtered tuples using the specified extra information.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

MostSpecificProtectedItemFilter

public MostSpecificProtectedItemFilter()

Method Detail

filter

public Collection<org.apache.directory.api.ldap.aci.ACITuple> filter(AciContext aciContext,
                                                            OperationScope scope,
                                                            org.apache.directory.api.ldap.model.entry.Entry userEntry)
                                                              throws org.apache.directory.api.ldap.model.exception.LdapException

Description copied from interface: ACITupleFilter

Returns the collection of the filtered tuples using the specified extra information.

Specified by:

filter in interface ACITupleFilter

Parameters:

aciContext - the container for ACI items

scope - the scope of the operation to be performed

userEntry - the Entry of the current user entry in the DIT

Returns:

the collection of filtered tuples

Throws:

org.apache.directory.api.ldap.model.exception.LdapException - if failed to filter the specific tuples