com.fgm.security.pki

Class CredentialsBase

java.lang.Object

com.fgm.security.pki.CredentialsBase

Direct Known Subclasses:

Credentials

public abstract class CredentialsBase
extends java.lang.Object

Manages credentials for a user.

Author:

mike.kluever

Field Summary

Fields

Modifier and Type	Field and Description
static java.lang.String	DFLT_COUNTRY_DIGRAPH The default country code digraph
protected java.lang.String	userDN The user's distinguished name
protected java.lang.String	userEmail The user's email address
protected java.lang.String	userNationality The user's nationality
protected java.lang.String	userSid The user's SID / Log in
protected java.security.cert.X509Certificate	x509Certificate The user's X.509 certificate

Constructor Summary

Constructors

Constructor and Description
CredentialsBase()

Method Summary

Methods

Modifier and Type	Method and Description
abstract boolean	canAccess(java.lang.String classification) Determine if the user with these credentials can access the data with the given classification
protected java.lang.String	determineUserSID(java.lang.String userDN) Extract the user's sid from their distinguished name
abstract java.lang.String	getBannerText() Gets a classification string suitable for a page banner based on user's highest allowed access.
abstract java.lang.String	getUserDistinguishedName()
java.lang.String	getUserDN()
java.lang.String	getUserEmail()
abstract java.lang.String	getUserNationality()
abstract java.lang.String	getUserSid()
abstract java.security.cert.X509Certificate	getX509Certificate()
boolean	isApprovied()
abstract void	setX509Certificate(java.security.cert.X509Certificate certificate)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

DFLT_COUNTRY_DIGRAPH

public static final java.lang.String DFLT_COUNTRY_DIGRAPH

The default country code digraph

See Also:

Constant Field Values

userDN

protected java.lang.String userDN

The user's distinguished name

userEmail

protected java.lang.String userEmail

The user's email address

userNationality

protected java.lang.String userNationality

The user's nationality

userSid

protected java.lang.String userSid

The user's SID / Log in

x509Certificate

protected java.security.cert.X509Certificate x509Certificate

The user's X.509 certificate

Constructor Detail

CredentialsBase

public CredentialsBase()

Method Detail

canAccess

public abstract boolean canAccess(java.lang.String classification)
                           throws java.lang.Exception

Determine if the user with these credentials can access the data with the given classification

Parameters:

classification - the classification of the data to be accessed

Returns:

true if the user is allowed to view, false otherwise

Throws:

java.lang.Exception - if classification is invalid

determineUserSID

protected java.lang.String determineUserSID(java.lang.String userDN)

Extract the user's sid from their distinguished name

Parameters:

userDN - the user's distinguished name

Returns:

the user's SID

getBannerText

public abstract java.lang.String getBannerText()

Gets a classification string suitable for a page banner based on user's highest allowed access.

Returns:

the banner classification string

getUserDistinguishedName

public abstract java.lang.String getUserDistinguishedName()

getUserEmail

public java.lang.String getUserEmail()

getUserDN

public java.lang.String getUserDN()

getUserNationality

public abstract java.lang.String getUserNationality()

getUserSid

public abstract java.lang.String getUserSid()

getX509Certificate

public abstract java.security.cert.X509Certificate getX509Certificate()

isApprovied

public boolean isApprovied()

setX509Certificate

public abstract void setX509Certificate(java.security.cert.X509Certificate certificate)