Class AAclAuthz

java.lang.Object
com.netscape.cms.authorization.AAclAuthz
All Implemented Interfaces:
IAuthzManager
Direct Known Subclasses:
BasicAclAuthz, DirAclAuthz

public abstract class AAclAuthz extends Object implements IAuthzManager
An abstract class represents an authorization manager that governs the access of internal resources such as servlets. It parses in the ACLs associated with each protected resources, and provides protected method checkPermission for code that needs to verify access before performing actions.

Here is a sample resourceACLS for a resource

   certServer.UsrGrpAdminServlet:
       execute:
           deny (execute) user="tempAdmin";
           allow (execute) group="Administrators";
 
To perform permission checking, code call authz mgr authorize() method to verify access. See AuthzMgr for calling example.

default "evaluators" are used to evaluate the "group=.." or "user=.." rules. See evaluator for more info

Version:
$Revision$, $Date$
See Also: