Package io.jenkins.plugins.batchcontrol.security

Class GrantLayer

java.lang.Object

io.jenkins.plugins.batchcontrol.security.GrantLayer

@Restricted(org.kohsuke.accmod.restrictions.NoExternalUse.class)
public final class GrantLayer
extends Object

Entry points to the grant layer for code outside this package (D-35b, D-35c).

Method Summary

Modifier and Type	Method	Description
static boolean	hasPermissionWithoutGrants(AccessControlled object, org.springframework.security.core.Authentication a, Permission permission)	Whether a holds permission on object without any grant: the answer of the installed strategy alone, with every grant layer switched off on this thread for the duration of the check (inherited ACLs included).
static boolean	isGrantLayered(AuthorizationStrategy strategy)	Whether strategy is a Batch Control strategy (layers grants over its parent).

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Details

isGrantLayered

public static boolean isGrantLayered(@CheckForNull
 AuthorizationStrategy strategy)

Whether strategy is a Batch Control strategy (layers grants over its parent).

hasPermissionWithoutGrants

public static boolean hasPermissionWithoutGrants(@NonNull
 AccessControlled object,
 @NonNull
 org.springframework.security.core.Authentication a,
 @NonNull
 Permission permission)

Whether a holds permission on object without any grant: the answer of the installed strategy alone, with every grant layer switched off on this thread for the duration of the check (inherited ACLs included).