Skip navigation links

oracle.wsm.security.policy.scenario
Class SecurityScenario

java.lang.Object
oracle.wsm.policy.model.impl.SimpleAssertion
oracle.wsm.policy.model.impl.ScenarioAssertion
oracle.wsm.security.policy.scenario.SecurityScenario

All Implemented Interfaces:

Serializable, IAssertionAdvertiser, IAssertion, IScenarioAssertion, ISimpleAssertion, ISimpleOracleAssertion, IDeSerializer, ISerializer

Direct Known Subclasses:

BindingAuthorizationScenario, BindingPermissionAuthorizationScenario, CoreIdSecurityScenario, HttpSecurityScenario, KerberosSecurityScenario, SCAComponentAuthorizationScenario, SCAComponentPermissionAuthorizationScenario, Wss10AnonWithCertsScenario, Wss10MutualAuthWithCertsScenario, Wss10SamlHOKTokenWithCertsScenario, Wss10SamlTokenScenario, Wss10SamlTokenWithCertsScenario, Wss10UsernameWithCertsScenario, Wss11AnonWithCertsScenario, Wss11MutualAuthWithCertsScenario, Wss11SamlWithCertsScenario, Wss11UsernameWithCertsScenario, WssSamlTokenBearerOverSSLScenario, WssSamlTokenOverSSLScenario, WssUsernameTokenOverSSLScenario, WssUsernameTokenScenario

public abstract class SecurityScenario

extends ScenarioAssertion

Since:

release specific (what release of product did this appear in)

Version:

$Header: owsm/src/oracle/wsm/security/policy/scenario/SecurityScenario.java /st_owsm/28 2009/02/01 07:16:33 vkdwived Exp $

Author:

rturlapa

See Also:

Serialized Form

Nested Class Summary

Nested classes/interfaces inherited from interface oracle.wsm.policy.model.IAssertion

IAssertion.AssertionTypes

Field Summary

Fields inherited from interface oracle.wsm.policy.model.ISimpleAssertion

attachToAttrQName, categoryAttrQName, descAttrQName, enforcedAttrQName, NameAttrQName, optionalAttrQName, silentAttrQName, StageAttrQName, statusAttrQName

Constructor Summary

SecurityScenario(QName qname)

Method Summary

Object	fromXML(Element element)
String	getDigest(List<String> namespaces, List<QName> qnames, boolean inclusionOrExclusionCriteria) Create a unique string representation that identifies this policy uniquely independent of the order of the assertions to enable a fast path intersection with another policy.
String	getDigestForAssertionObject(List<String> namespaces, List<QName> qnames, boolean inclusionOrExclusionCriteria) The scenario assertion can contain xml elements which do not participate in the default digest calculation algorithm.
String	getDigestForAttrs(List<String> namespaces, List<QName> qnames, boolean inclusionOrExclusionCriteria)
String	getDigestOfElement(Element node, List<String> namespaces, List<QName> qnames, boolean inclusionOrExclusionCriteria) This method creats Digest of Assertion.
IAssertion	intersect(IAssertion assertion, IPolicyRegistry reg, IIntersectionContext context) Returns an assertion which is equivalent of intersect of self and argument.
Element	toXML(Object o, Node element)

Methods inherited from class oracle.wsm.policy.model.impl.ScenarioAssertion

createInstance, createInstance, equals, hashCode, isIdentical, parse, setPolicyAttributes, toString, write

Methods inherited from class oracle.wsm.policy.model.impl.SimpleAssertion

addAttribute, advertiseOracleWSPolicy, advertiseWSPolicy, cloneAttrs, getAssertionType, getAttachTo, getAttribute, getAttributes, getBindings, getCategory, getCopyOfAssertion, getDescription, getDescription, getDigest, getGuard, getName, getParent, getQName, getStringForMatching, getStrValue, getUniquePathToAssertion, getWSPolicy15QName, getWSPolicy2006QName, hasBindings, hasGuard, hasParent, intersect, isEnforced, isIncludedInDigestCalculation, isNormalized, isOptional, isSilent, merge, merge, normalize, normalize, removeAttribute, removeAttrsForOracleWSPolicyAdvertisement, removeAttrsForWSPolicyAdvertisement, removeBindings, removeGuard, setAttachTo, setAttribute, setAttributes, setBindings, setCategory, setDefaultValues, setDescription, setEnforced, setGuard, setName, setNormalized, setOptional, setParent, setSilent, setStrValue, validate

Methods inherited from class java.lang.Object

clone, finalize, getClass, notify, notifyAll, wait, wait, wait

Methods inherited from interface oracle.wsm.policy.model.IScenarioAssertion

getAssertionObject, setAssertionObject

Methods inherited from interface oracle.wsm.policy.model.IAssertion

addAttribute, getAssertionType, getAttribute, getAttributes, getDigest, getParent, getQName, getStringForMatching, hasParent, intersect, isNormalized, isOptional, merge, merge, normalize, normalize, removeAttribute, setAttributes, setNormalized, setOptional, setParent, validate

Methods inherited from interface oracle.wsm.policy.model.ISimpleOracleAssertion

getAttachTo, getBindings, getCategory, getDescription, getDescription, getGuard, getName, hasBindings, hasGuard, isEnforced, isSilent, removeBindings, removeGuard, setAttachTo, setBindings, setCategory, setDescription, setEnforced, setGuard, setName, setSilent

Methods inherited from interface oracle.wsm.policy.advertisement.IAssertionAdvertiser

advertiseOracleWSPolicy, advertiseWSPolicy

Constructor Detail

SecurityScenario

public SecurityScenario(QName qname)

Method Detail

fromXML

public final Object fromXML(Element element)
                     throws PolicyParseFailedException

Throws:

PolicyParseFailedException

toXML

public final Element toXML(Object o,
                           Node element)
                    throws PolicySerializationFailedException

Throws:

PolicySerializationFailedException

intersect

public IAssertion intersect(IAssertion assertion,
                            IPolicyRegistry reg,
                            IIntersectionContext context)

Description copied from interface: IAssertion

Returns an assertion which is equivalent of intersect of self and argument. Here the external policy are resolved via a policy registry that is supplied as an argument.

Specified by:

intersect in interface IAssertion

Overrides:

intersect in class SimpleAssertion

Parameters:

assertion - the assertion to intersect with

context - - The intersection context is passed to capture the running context of the intersection and to accumulate intersection failures

Returns:

the equivalent of intersection of self and argument

getDigestForAttrs

public String getDigestForAttrs(List<String> namespaces,
                                List<QName> qnames,
                                boolean inclusionOrExclusionCriteria)

Overrides:

getDigestForAttrs in class SimpleAssertion

getDigest

public String getDigest(List<String> namespaces,
                        List<QName> qnames,
                        boolean inclusionOrExclusionCriteria)

Create a unique string representation that identifies this policy uniquely independent of the order of the assertions to enable a fast path intersection with another policy. if inclusionOrExclusionCriteria is true then:
Only assertions that are either in the namespace in the namespace list or the assertion qname mentioned in the qnames list are included in digest calculation. Basically this projects out the assertions belonging to the namespace or qname if namespaces is empty and qnames is empty then it is equivalent to calling getDigest() if inclusionOrExclusionCriteria is false then:
The assertions that are in the namespace list or assertion qname are no included in the digest calculation. - overriding the default implementation.

Specified by:

getDigest in interface IAssertion

Overrides:

getDigest in class SimpleAssertion

Parameters:

namespaces - - list of strings that define the namespaces to be include or excluded in digest calculation

qnames - - list of qnames that define the qnames to be included or excluded in digest calculation

inclusionOrExclusionCriteria - - whether the list of namespaces or qnames should be included or excluded in the digest calculation

getDigestForAssertionObject

public String getDigestForAssertionObject(List<String> namespaces,
                                          List<QName> qnames,
                                          boolean inclusionOrExclusionCriteria)

The scenario assertion can contain xml elements which do not participate in the default digest calculation algorithm. This provides a mechanism for the child xml elements to participate in the digest calculation. It is recommended that subclasses of this class override the implementation.

getDigestOfElement

public String getDigestOfElement(Element node,
                                 List<String> namespaces,
                                 List<QName> qnames,
                                 boolean inclusionOrExclusionCriteria)

This method creats Digest of Assertion. The Element passed is the marshalled version of the SecurityScenario's AssertionObject. The default attributes if will not be included in the digest due to limitation of JAXB.

Parameters:

node -

namespaces -

qnames -

inclusionOrExclusionCriteria -

Returns:

Skip navigation links