Uses of Interface
org.globus.wsrf.security.authorization.Interceptor

Packages that use Interceptor
org.globus.wsrf.impl.security.authorization   
org.globus.wsrf.security.authorization   
 

Uses of Interceptor in org.globus.wsrf.impl.security.authorization
 

Classes in org.globus.wsrf.impl.security.authorization that implement Interceptor
 class GridMapAuthorization
          Performs gridmap authorization and implements PDP interface.
 class HostAuthorization
          Performs host based authorization and implements PDP and Authorization interface.
 class IdentityAuthorization
          Does identity authorization and and implements PDP and Authorization interface.
 class LocalConfigPDP
          A PDP implementation that is intended to be used by services to easily bootstrap an ACL into the PDP.
 class NoAuthorization
          No authorization of the peer is done.
 class SAMLAuthorizationCallout
          Calls out to a configured authorization service.
 class SelfAuthorization
          Enforces that the client and server have the same identity.
 class ServiceAuthorizationChain
          The ServiceAuthorizationChain class ties together and evaluates chains of PDP and PIP implementations.
 class UsernameAuthorization
          Uses Java Login module to authorize based on user name and password used on the method call.
 

Fields in org.globus.wsrf.impl.security.authorization declared as Interceptor
protected  Interceptor[] ServiceAuthorizationChain.interceptor
           
 

Uses of Interceptor in org.globus.wsrf.security.authorization
 

Subinterfaces of Interceptor in org.globus.wsrf.security.authorization
 interface PDP
          Interface that must be implemented by all PDPs in an interceptor chain A PDP is responsible for making decisions whether a subject is allowed to invoke a certain operation.
 interface PIP
          The PIP interface should be implemeted by interceptors that are responsible for collecting attributes for subject that later on can be used by PDPs to determine whether the subject is allowed to invoke the requested operation.