Project

General

Profile

task #7100

Split CdmAuthority into operations and filters

Added by Andreas Müller about 1 year ago. Updated about 1 year ago.

Status:
New
Priority:
New
Category:
cdm
Target version:
Start date:
11/30/2017
Due date:
% Done:

0%

Severity:
normal
Tags:

Description

Currently CdmAuthorities included operation evalution information (operation attribute) and filter information (permissionClass, property, targetUuid). Filter information needs to be concatenatable while the operation information is unique for all dimensions of the authority. Also filters may be reusable in other contexts (e.g. a subtree filter) - but be careful not to influence rights by redefining filters.

Therefore we may want to separate these 2 functionalities into 2 classes, the CdmAuthority class which holds operation evaluation information and CdmFilter, which holds the other information and which is referenced by CdmAuthority.

Filters can be concatenated, where the implementation of a filter needs to know how to integrate the subfilter (otherwise a filter not supported operation is thrown).

Filters are pure filter definitions. Implementing class may depend on the context the filter is used for. E.g. a filter implementation for a data export may look different then the one for granted authorities. The required implementation may be loaded via factory methods, spring prototypes, ...

Filters and authorities may have human readable representations such as "Filter on classification abc"


Related issues

Related to Edit - bug #7099: Make CdmAuthority a persistable class New 11/30/2017

History

#1 Updated by Andreas Müller about 1 year ago

  • Related to bug #7099: Make CdmAuthority a persistable class added

#2 Updated by Andreas Müller about 1 year ago

  • Description updated (diff)

#3 Updated by Andreas Kohlbecker about 1 year ago

  • Tracker changed from bug to task

Also available in: Atom PDF

Add picture from clipboard (Maximum size: 40 MB)