com.neurosys.site.wicket.components.session

Class AbstractAuthorizationStrategy

java.lang.Object

com.neurosys.site.wicket.components.session.AbstractAuthorizationStrategy

All Implemented Interfaces:

org.apache.wicket.authorization.IAuthorizationStrategy, org.apache.wicket.authorization.IUnauthorizedComponentInstantiationListener

Direct Known Subclasses:

AuthorizationStrategy

public abstract class AbstractAuthorizationStrategy
extends Object
implements org.apache.wicket.authorization.IAuthorizationStrategy, org.apache.wicket.authorization.IUnauthorizedComponentInstantiationListener

Checks/Protects pages by checking if User is authorized to visit them. (checks session for AuthToken)
Note: AuthenticationToken is set by AbstractLoginForm
Security on template is added using AbstractAuthorizationStrategy which is added in SecuritySettings in Application.init()

Author:

Arjun Dhar

Field Summary

Fields inherited from interface org.apache.wicket.authorization.IAuthorizationStrategy

ALLOW_ALL

Constructor Summary

Constructors

Constructor and Description
AbstractAuthorizationStrategy()

Method Summary

Modifier and Type	Method and Description
abstract Class<? extends org.apache.wicket.markup.html.WebPage>	getAuthChallengePage(org.apache.wicket.Component component) For UnAuth access redirect to Login Page
abstract List<Class>	getPageTypesProtected() Get the Class of the type of page/panels/web components this Strategy is supposed to protect
boolean	isActionAuthorized(org.apache.wicket.Component component, org.apache.wicket.authorization.Action action)
<T extends org.apache.wicket.Component> boolean	isInstantiationAuthorized(Class<T> componentClass)
void	onUnauthorizedInstantiation(org.apache.wicket.Component component)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AbstractAuthorizationStrategy

public AbstractAuthorizationStrategy()

Method Detail

getPageTypesProtected

public abstract List<Class> getPageTypesProtected()

Get the Class of the type of page/panels/web components this Strategy is supposed to protect

Returns:

getAuthChallengePage

public abstract Class<? extends org.apache.wicket.markup.html.WebPage> getAuthChallengePage(org.apache.wicket.Component component)

For UnAuth access redirect to Login Page

Returns:

isActionAuthorized

public boolean isActionAuthorized(org.apache.wicket.Component component,
                                  org.apache.wicket.authorization.Action action)

Specified by:

isActionAuthorized in interface org.apache.wicket.authorization.IAuthorizationStrategy

isInstantiationAuthorized

public <T extends org.apache.wicket.Component> boolean isInstantiationAuthorized(Class<T> componentClass)

Specified by:

isInstantiationAuthorized in interface org.apache.wicket.authorization.IAuthorizationStrategy

onUnauthorizedInstantiation

public void onUnauthorizedInstantiation(org.apache.wicket.Component component)

Specified by:

onUnauthorizedInstantiation in interface org.apache.wicket.authorization.IUnauthorizedComponentInstantiationListener