Hi Nate

Nathan Sarr wrote:
>    I was wondering why not do the following in AccessControlEntry interface:
>     public Permission[] getPermissions();
>     public int getMask();
>     public String getPattern()

Permission is an interface, for which BasePermission and
CumulativePermission are both concrete implementations. The getMask()
and getPattern() are both defined on the Permission interface. We don't
have these methods defined on AccessControlEntry because doing so would
bind AccessControlEntry unnecessarily to the notion of an
AccessControlEntry has cumulative permissions whereas often a single
permission (a BasePermission) is all that is needed.

>    I was also wondering about the isGranting() method.  When would a 
> permission not be granting?  I changed
> the interface to the following so I could delegate to the ACE for checking 
> permissions for a sid:

I've added JavaDocs as follows:

    /**
     * Indicates the a Permission is being granted to the relevant Sid.
     * If false, indicates the permission is being revoked/blocked.
     *
     * @return true if being granted, false otherwise
     */
    public boolean isGranting();


Cheers
Ben

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Home: http://acegisecurity.org
Acegisecurity-developer mailing list
Acegisecurity-developer@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer

Reply via email to