com.sibvisions.rad.server.security
Class XmlSecurityManager

java.lang.Object
  com.sibvisions.rad.server.security.AbstractSecurityManager
      com.sibvisions.rad.server.security.XmlSecurityManager

All Implemented Interfaces:

ISecurityManager, IPasswordValidator

public class XmlSecurityManager
extends AbstractSecurityManager

The XmlSecurityManager uses a xml file to authenticate users. It requires the following information:

• usersfile (the file or JNDI resource with all users)

Constructor Summary

XmlSecurityManager()

Method Summary

void	changePassword(ISession pSession) Changes the password for a user.
IAccessController	getAccessController(ISession pSession) Gets the access controller for a session.
void	logout(ISession pSession) Performs a manual or automatic logout.
void	release() Releases all used resources.
void	validateAuthentication(ISession pSession) Validates if a session has valid credentials to access an application.

Methods inherited from class com.sibvisions.rad.server.security.AbstractSecurityManager

addHiddenPackage, checkPassword, comparePassword, createSecurityManager, createSecurityManager, createSecurityManager, debug, error, getEncryptedPassword, getPasswordValidator, info, isAllowEncryptedUserPassword, isHiddenPackage, isPasswordEncrypted, isPasswordEncryptionEnabled, prepareException, prepareException, removeHiddenPackage, setAllowEncryptedUserPassword, validatePassword

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

XmlSecurityManager

public XmlSecurityManager()

Method Detail

validateAuthentication

public void validateAuthentication(ISession pSession)
                            throws java.lang.Exception

Validates if a session has valid credentials to access an application.

Parameters:

pSession - the session which needs access

Throws:

java.lang.Exception - if the access is denied (invalid username or password, password needs to be changed, ...)

changePassword

public void changePassword(ISession pSession)
                    throws java.lang.Exception

Changes the password for a user.

Parameters:

pSession - the session which wants to change the password

Throws:

java.lang.Exception - if it's not possible to change the password

logout

public void logout(ISession pSession)

Performs a manual or automatic logout.

Parameters:

pSession - the session which performs the logout

getAccessController

public IAccessController getAccessController(ISession pSession)

Gets the access controller for a session. The controller handles the access to server side objects.

Parameters:

pSession - the session for which the access controller is needed

Returns:

the access controller or null if no access controller should be used

release

public void release()

Releases all used resources.