com.flowable.core.spring.security

Class SecurityUtils

java.lang.Object

com.flowable.core.spring.security.SecurityUtils

public class SecurityUtils
extends Object

Author:

Filip Hrisafov, Joram Barrez

Method Summary

Modifier and Type	Method and Description
static org.springframework.security.core.GrantedAuthority	createGroupAuthority(String groupKey)
static org.springframework.security.core.GrantedAuthority	createTenantAuthority(String tenantId)
static org.springframework.security.core.GrantedAuthority	createUserDefinitionAuthority(String userDefinitionKey)
static boolean	currentUserHasAdminRights(PlatformSecurityInterceptor platformSecurityInterceptor, String[] additionalAdminUsers)
static boolean	currentUserHasAuthority(String authority) Deprecated. use the SecurityScope.hasAuthority(String) obtained via getCurrentUserSecurityScope() instead
static boolean	currentUserHasGroup(String group) Deprecated. use the SecurityScope.getGroupKeys() obtained via getCurrentUserSecurityScope() to check instead
static boolean	currentUserIsSuperAdmin(PlatformSecurityInterceptor platformSecurityInterceptor, String[] additionalAdminUsers) A super admin is an admin user in the default tenant.
static boolean	currentUserIsTenantAdmin(PlatformSecurityInterceptor platformSecurityInterceptor, String[] additionalAdminUsers, String tenantId) A tenant admin is an admin user in its own tenant.
static String	getCurrentTenantId() Deprecated. use the SecurityScope.getTenantId() obtained via getCurrentUserSecurityScope() instead
static Set<String>	getCurrentUserGroupKeys() Deprecated. use the SecurityScope.getGroupKeys() obtained via getCurrentUserSecurityScope() instead
static String	getCurrentUserId() Deprecated. use the SecurityScope.getUserId() obtained via getCurrentUserSecurityScope() instead
static com.flowable.core.common.api.security.SecurityScope	getCurrentUserSecurityScope()
static void	setSecurityScopeProvider(com.flowable.core.common.api.security.SecurityScopeProvider securityScopeProvider)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

setSecurityScopeProvider

public static void setSecurityScopeProvider(com.flowable.core.common.api.security.SecurityScopeProvider securityScopeProvider)

createTenantAuthority

public static org.springframework.security.core.GrantedAuthority createTenantAuthority(String tenantId)

createGroupAuthority

public static org.springframework.security.core.GrantedAuthority createGroupAuthority(String groupKey)

createUserDefinitionAuthority

public static org.springframework.security.core.GrantedAuthority createUserDefinitionAuthority(String userDefinitionKey)

getCurrentUserId

@Deprecated
public static String getCurrentUserId()

Deprecated. use the SecurityScope.getUserId() obtained via getCurrentUserSecurityScope() instead

getCurrentTenantId

@Deprecated
public static String getCurrentTenantId()

Deprecated. use the SecurityScope.getTenantId() obtained via getCurrentUserSecurityScope() instead

currentUserHasAdminRights

public static boolean currentUserHasAdminRights(PlatformSecurityInterceptor platformSecurityInterceptor,
                                                String[] additionalAdminUsers)

currentUserIsTenantAdmin

public static boolean currentUserIsTenantAdmin(PlatformSecurityInterceptor platformSecurityInterceptor,
                                               String[] additionalAdminUsers,
                                               String tenantId)

A tenant admin is an admin user in its own tenant.

currentUserIsSuperAdmin

public static boolean currentUserIsSuperAdmin(PlatformSecurityInterceptor platformSecurityInterceptor,
                                              String[] additionalAdminUsers)

A super admin is an admin user in the default tenant.

getCurrentUserGroupKeys

@Deprecated
public static Set<String> getCurrentUserGroupKeys()

Deprecated. use the SecurityScope.getGroupKeys() obtained via getCurrentUserSecurityScope() instead

currentUserHasGroup

@Deprecated
public static boolean currentUserHasGroup(String group)

Deprecated. use the SecurityScope.getGroupKeys() obtained via getCurrentUserSecurityScope() to check instead

currentUserHasAuthority

@Deprecated
public static boolean currentUserHasAuthority(String authority)

Deprecated. use the SecurityScope.hasAuthority(String) obtained via getCurrentUserSecurityScope() instead

getCurrentUserSecurityScope

public static com.flowable.core.common.api.security.SecurityScope getCurrentUserSecurityScope()