AccessGrid.Security.AuthorizationManager.AuthorizationManagerI

Package AccessGrid :: Package Security :: Module AuthorizationManager :: Class AuthorizationManagerI

[show private | hide private]

Class AuthorizationManagerI

SOAPInterface --+
                |
               AuthorizationManagerI

Known Subclasses:: AuthorizationIMixIn

Authorization manager network interface.

Method Summary
	`__init__(self, impl)` The server side interface object.
	`AddAction(self, action)` Add an action to the authorization manager.
	`AddRole(self, role)` Add a role to the authorization manager.
	`AddRolesToAction(self, action, roleList)` Add multiple roles to an action.
	`AddRoleToAction(self, action, role)` Add a role to the specified action.
	`AddSubjectsToRole(self, role, subjectList)` Add a subject to a particular role.
	`FindRole(self, name)` Find a role in this authorization manager.
	`GetPolicy(self)` Retrieve the policy.
	`GetRolesForSubject(self, subject)` Get the list of roles the subject is a part of.
	`ImportPolicy(self, policy)` Import policy.
	`IsAuthorized(self, subject, action)` Check to see if the subject authorized for the action.
	`ListActions(self, subject, role)` List the actions known by this authorization manager.
	`ListRoles(self, action)` Retrieve the entire list of Roles.
	`ListSubjects(self, role)` List subjects that are in a specific role.
	`RemoveAction(self, name)` Remove an action from the authorization manager.
	`RemoveRole(self, name)` Remove a role from the authorization manager.
	`RemoveRoleFromAction(self, action, role)` Remove a Role from the action.
	`RemoveSubjectsFromRole(self, role, subjectList)` Remove multiple subjects from the role.
	`TestImportExport(self, policy)` A test call that verifies the policy can be imported and exported without modification.
Inherited from SOAPInterface
	`_IsValid(self)` This method is here to support calls that just want to see if there is a valid server endpoint for communication from the client.
	`IsValid(self)` This method is here to support calls that just want to see if there is a valid server endpoint for communication from the client.

Method Details

init(self, impl)
(Constructor)

The server side interface object. This gets an implementation to initialize itself with.

Parameters:: impl - the implementation object this interface represents
(type=AccessGrid.Security.AuthorizationManager)

Overrides:: AccessGrid.hosting.SOAPInterface.SOAPInterface.__init__

AddAction(self, action)

Add an action to the authorization manager.

Parameters:: action - the action to add
(type=AccessGrid.Security.Action object)

AddRole(self, role)

Add a role to the authorization manager.

Parameters:: role - the role to add.
(type=AccessGrid.Security.Role object)

AddRolesToAction(self, action, roleList)

Add multiple roles to an action.

WARNING: this has to marshall data.

Parameters:: action - the action that gets the roles added to it
(type=an AccessGrid.Security.Action object); roleList - the list of roles to add to the action.
(type=a list of AccessGrid.Security.Role objects)

AddRoleToAction(self, action, role)

Add a role to the specified action.

WARNING: this has to marshall data.

Parameters:: action - the action that gets the role added
(type=AccessGrid.Security.Action object); role - the role to add to the action
(type=AccessGrid.Security.Role object)

AddSubjectsToRole(self, role, subjectList)

Add a subject to a particular role. This uses AddSubjectsToRole internally.

WARNING: this has to marshall data.

Parameters:: role - the role to add the subject to
(type=AccessGrid.Security.Role object); subjectList - the subject list to add
(type=list of AccessGrid.Security.Subject objects)

FindRole(self, name)

Find a role in this authorization manager.

Parameters:: name - the name of the role to find
(type=string)

Returns:: the AccessGrid.Security.Role object or None

GetPolicy(self)

Retrieve the policy.

Returns:: a string containing an XML formatted authorization policy.

GetRolesForSubject(self, subject)

Get the list of roles the subject is a part of.

WARNING: this has to marshall data.

Parameters:: subject - the subject the roles are for
(type=AccessGrid.Security.Subject object)

Returns:: list of AccessGrid.Security.Role objects

ImportPolicy(self, policy)

Import policy.

Parameters:: policy - an authorization policy
(type=a string containing an XML formatted policy.)

IsAuthorized(self, subject, action)

Check to see if the subject authorized for the action.

WARNING: this has to marshall data.

Parameters:: subject - the subject being verified.
(type=AccessGrid.Security.Subject object); action - the action the subject is being verified for.
(type=AccessGrid.Security.Action object.)

ListActions(self, subject=None, role=None)

List the actions known by this authorization manager.

WARNING: this has to marshall data.

Returns:: a list of AccessGrid.Security.Action objects.

ListRoles(self, action=None)

Retrieve the entire list of Roles.

This involves marshalling data across the wire.

Parameters:: action - the action to list roles for, if none is specified, list all known roles.
(type=AccessGrid.Security.Action)

Returns:: a list of AccessGrid.Security.Role objects

ListSubjects(self, role=None)

List subjects that are in a specific role.

WARNING: this has to marshall data.

Parameters:: role - the role to list the subjects of.
(type=an AccessGrid.Security.Role object)

Returns:: a list of AccessGrid.Security.Subject objects

RemoveAction(self, name)

Remove an action from the authorization manager.

Parameters:: name - the name of the action to remove
(type=string.)

RemoveRole(self, name)

Remove a role from the authorization manager.

Parameters:: name - the name of the role to remove.
(type=string)

RemoveRoleFromAction(self, action, role)

Remove a Role from the action.

WARNING: this has to marshall data.

Parameters:: action - the action to remove the role from
(type=AccessGrid.Security.Action object); role - the role to remove from the action
(type=AccessGrid.Security.Role object)

RemoveSubjectsFromRole(self, role, subjectList)

Remove multiple subjects from the role.

WARNING: this has to marshall data.

Parameters:: role - the role to remove the subject from
(type=AccessGrid.Security.Role object); subjectList - the list of subjects to remove
(type=a list of AccessGrid.Security.Subject objects)

TestImportExport(self, policy)

A test call that verifies the policy can be imported and exported without modification.

Parameters:: policy - an authorization policy
(type=a string containing an XML formatted policy.)

Generated by Epydoc 2.1 on Thu Apr 14 16:39:26 2005

http://epydoc.sf.net

Class AuthorizationManagerI

__init__(self, impl) (Constructor)

AddAction(self, action)

AddRole(self, role)

AddRolesToAction(self, action, roleList)

AddRoleToAction(self, action, role)

AddSubjectsToRole(self, role, subjectList)

FindRole(self, name)

GetPolicy(self)

GetRolesForSubject(self, subject)

ImportPolicy(self, policy)

IsAuthorized(self, subject, action)

ListActions(self, subject=None, role=None)

ListRoles(self, action=None)

ListSubjects(self, role=None)

RemoveAction(self, name)

RemoveRole(self, name)

RemoveRoleFromAction(self, action, role)

RemoveSubjectsFromRole(self, role, subjectList)

TestImportExport(self, policy)

init(self, impl)
(Constructor)