org.globus.security.authorization
Interface PDP

All Known Subinterfaces:

PDPInterceptor

public interface PDP

This defines the interface an authorization scheme needs to implement. AuthorizationException should be thrown only if some unexpected error occured (for example in configuration). Any other issues should be returned as a part of Decision object, with a deny or indeterminate, as appropriate. If an AuthorizationException is thrown, the framework just throws the exception and no further processing is done.

Method Summary

Decision	canAccess(RequestEntities requestEntities, NonRequestEntities nonReqEntities)
Decision	canAdminister(RequestEntities requestEntities, NonRequestEntities nonReqEntities)

Method Detail

canAccess

Decision canAccess(RequestEntities requestEntities,
                   NonRequestEntities nonReqEntities)
                   throws AuthorizationException

Throws:

AuthorizationException

canAdminister

Decision canAdminister(RequestEntities requestEntities,
                       NonRequestEntities nonReqEntities)
                       throws AuthorizationException

Throws:

AuthorizationException