KbAuthorizationService Object Services | 5 | ![]() |
The KbAuthorizationService module is defined in the file named:
The KbAuthorizationService module defines services that can be used to control access to methods on other objects.
It's version information is:
$Id: KbAuthorizationService.idl,v 1.39 1997-08-07 17:03:12-04 wlf Exp $
It is defined in the Java package named:
org.cert.KbAuthorizationService
module KbAuthorizationService
{
Forward declarations:
interface AuthorizationManager;
interface DynamicOperationPolicy;
interface DynamicRolePolicy;
interface Operation;
interface OperationExclusionSet;
interface OperationPolicy;
interface Role;
interface RoleExclusionSet;
interface RolePolicy;
interface StaticOperationPolicy;
interface StaticRolePolicy;
interface Subject;
Sequence declarations:
typedef sequence<AuthorizationManager> SeqOfAuthorizationManager;
typedef sequence<DynamicOperationPolicy> SeqOfDynamicOperationPolicy;
typedef sequence<DynamicRolePolicy> SeqOfDynamicRolePolicy;
typedef sequence<Operation> SeqOfOperation;
typedef sequence<OperationExclusionSet> SeqOfOperationExclusionSet;
typedef sequence<OperationPolicy> SeqOfOperationPolicy;
typedef sequence<Role> SeqOfRole;
typedef sequence<RoleExclusionSet> SeqOfRoleExclusionSet;
typedef sequence<RolePolicy> SeqOfRolePolicy;
typedef sequence<StaticOperationPolicy> SeqOfStaticOperationPolicy;
typedef sequence<StaticRolePolicy> SeqOfStaticRolePolicy;
typedef sequence<Subject> SeqOfSubject;
typedef sequence<Role> Roles;
struct Connection {
string peer;
long port;
};
interface Subject {
readonly attribute Connection the_connection;
readonly attribute
KbIdentificationService::User User_role;
void initialize(
in KbIdentificationService::User the_user
);
void activate_role(
in KbIdentificationService::User the_user,
in string rolename
);
};
interface Role {
The maximum number of members allowed to be authorized to act in this role.
attribute long static_membership_limit;
The current number of users authorized to act in this role.
attribute long static_number_of_members;
The maximum number of members that are allowed to be actively acting in this role at one time.
attribute long dynamic_membership_limit;
The number of users who are currently actively acting in this role.
attribute long dynamic_number_of_members;
readonly attribute
KosCollection::Set
/*
of
KbIdentificationService::User
*/
User_role;
readonly attribute
KosCollection::Set /* of Role */ Role_role;
readonly attribute
KosCollection::Set /* of Subject */ Subject_role;
void activate(
in KbIdentificationService::User the_user
);
KbIdentificationService::User get_user();
Roles get_active_roles();
};
interface Operation {
readonly attribute
KosCollection::Set /* of Role */ Role_role;
};
interface RoleExclusionSet {
readonly attribute
KosCollection::Set /* of Role */ Role_role;
};
interface OperationExclusionSet {
readonly attribute
KosCollection::Set
/*
of
Operation
*/
Operation_role;
};
interface RolePolicy {
readonly attribute
KosCollection::Set
/*
of
RoleExclusionSet
*/
RoleExclusionSet_role;
};
interface StaticRolePolicy : RolePolicy {
};
interface DynamicRolePolicy : RolePolicy {
boolean can_be_active(
in Roles the_roles
);
};
interface OperationPolicy {
readonly attribute
KosCollection::Set
/*
of
OperationExclusionSet
*/
OperationExclusionSet_role;
};
interface StaticOperationPolicy : OperationPolicy {
};
interface DynamicOperationPolicy : OperationPolicy {
};
interface AuthorizationManager {
readonly attribute
StaticRolePolicy StaticRolePolicy_role;
readonly attribute
DynamicRolePolicy DynamicRolePolicy_role;
readonly attribute
StaticOperationPolicy StaticOperationPolicy_role;
readonly attribute
KosCollection::Set /* of Role */ Role_role;
readonly attribute
KosCollection::Set
/*
of
KbIdentificationService::User
*/
User_role;
readonly attribute
KosCollection::Set /* of Subject */ Subject_role;
readonly attribute
DynamicOperationPolicy
DynamicOperationPolicy_role;
Subject create_subject(
in KbIdentificationService::User the_user
);
Role find_role_by_name(
in string rolename
);
boolean can_activate_role(
in Role a_role
);
};
};