Package com.atlassian.confluence.impl.webapp.security.enforcer

Class WebSudoEnforcer

java.lang.Object

com.atlassian.confluence.impl.webapp.security.enforcer.WebSudoEnforcer

All Implemented Interfaces:

SecurityEnforcer

public final class WebSudoEnforcer
extends Object
implements SecurityEnforcer

Enforces a WebSudo session for actions annotated by WebSudoRequired. The lower level implementation is in WebSudoManager.

Since:

8.8

Field Summary

Fields inherited from interface com.atlassian.confluence.impl.webapp.security.SecurityEnforcer

LOGIN_PATH, NOT_PERMITTED_PATH

Constructor Summary

Constructors

Constructor	Description
WebSudoEnforcer(WebSudoManager webSudoManager)

Method Summary

Modifier and Type	Method	Description
void	enforce(ConfluenceUser user, javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response)	Enforcement action that should be taken when SecurityEnforcer.shouldEnforce(com.atlassian.confluence.user.ConfluenceUser, com.atlassian.confluence.impl.webapp.security.MappedAction, javax.servlet.http.HttpServletRequest, javax.servlet.http.HttpServletResponse) returns true.
boolean	shouldEnforce(ConfluenceUser user, MappedAction mappedAction, javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

WebSudoEnforcer

public WebSudoEnforcer(WebSudoManager webSudoManager)

Method Detail

shouldEnforce

public boolean shouldEnforce(ConfluenceUser user,
                             MappedAction mappedAction,
                             javax.servlet.http.HttpServletRequest request,
                             javax.servlet.http.HttpServletResponse response)

Specified by:

shouldEnforce in interface SecurityEnforcer

Returns:

true if arguments failed enforcement criteria and SecurityEnforcer.enforce(com.atlassian.confluence.user.ConfluenceUser, javax.servlet.http.HttpServletRequest, javax.servlet.http.HttpServletResponse) should be called.

enforce

public void enforce(ConfluenceUser user,
                    javax.servlet.http.HttpServletRequest request,
                    javax.servlet.http.HttpServletResponse response)
             throws IOException

Description copied from interface: SecurityEnforcer

Enforcement action that should be taken when SecurityEnforcer.shouldEnforce(com.atlassian.confluence.user.ConfluenceUser, com.atlassian.confluence.impl.webapp.security.MappedAction, javax.servlet.http.HttpServletRequest, javax.servlet.http.HttpServletResponse) returns true.

Specified by:

enforce in interface SecurityEnforcer

Throws:

IOException