Package org.keycloak.authorization.policy.provider.group

Class GroupPolicyProvider

java.lang.Object

org.keycloak.authorization.policy.provider.group.GroupPolicyProvider

All Implemented Interfaces:

PartialEvaluationPolicyProvider, PolicyProvider, Provider

public class GroupPolicyProvider
extends Object
implements PolicyProvider, PartialEvaluationPolicyProvider

Author:

Pedro Igor

Constructor Summary

Constructors

Constructor	Description
GroupPolicyProvider(BiFunction<Policy,AuthorizationProvider,GroupPolicyRepresentation> representationFunction)

Method Summary

Modifier and Type	Method	Description
void	close()
void	evaluate(Evaluation evaluation)
boolean	evaluate(KeycloakSession session, Policy policy, UserModel subject)	Evaluate if the given policy grants access to the given subject.
Stream<Policy>	getPermissions(KeycloakSession session, ResourceType resourceType, UserModel user)	Returns a list of Policy instances representing the permissions that apply to a given subject when partially evaluating the realm resources that can be accessed.
boolean	supports(Policy policy)	If partial evaluation is supported for the given policy.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

GroupPolicyProvider

public GroupPolicyProvider(BiFunction<Policy,AuthorizationProvider,GroupPolicyRepresentation> representationFunction)

Method Details

evaluate

public void evaluate(Evaluation evaluation)

Specified by:

evaluate in interface PolicyProvider

getPermissions

public Stream<Policy> getPermissions(KeycloakSession session,
 ResourceType resourceType,
 UserModel user)

Description copied from interface: PartialEvaluationPolicyProvider

Returns a list of Policy instances representing the permissions that apply to a given subject when partially evaluating the realm resources that can be accessed.

Specified by:

getPermissions in interface PartialEvaluationPolicyProvider

Parameters:

session - the session

resourceType - the type of the resource

user - the subject

Returns:

the permissions that apply to the given subject

evaluate

public boolean evaluate(KeycloakSession session,
 Policy policy,
 UserModel subject)

Description copied from interface: PartialEvaluationPolicyProvider

Evaluate if the given policy grants access to the given subject.

Specified by:

evaluate in interface PartialEvaluationPolicyProvider

Parameters:

session - the session

policy - the policy

subject - the subject

Returns:

true if access is granted. Otherwise, returns false

supports

public boolean supports(Policy policy)

Description copied from interface: PartialEvaluationPolicyProvider

If partial evaluation is supported for the given policy.

Specified by:

supports in interface PartialEvaluationPolicyProvider

Parameters:

policy - the policy

Returns:

true if supported. Otherwise, returns false

close

public void close()

Specified by:

close in interface Provider