Package de.elo.ix.jscript.handler

Interface IAccessHandler

public interface IAccessHandler
Internally used interface. Class Access forwards method calls to an implementation of this interface. The implementation is only available when we are running as a IX event script or plugin.

  • Method Summary

    Modifier and Type
    Method
    Description
    boolean
    checkAccess(Object obj, int lur)
    This function checks whether the current user has at least one of the given access permissions for the object.
    UserInfo
    findUser(Object idOrGuidOrName)
    Find the UserInfo object for the given user ID, GUID or name.
    boolean
    hasFlag(Object user, Number flags)
    Returns true, if the user has at least one of the given flags.
    boolean
    hasFlag2(Object user, Number flags2)
    Returns true, if the user has at least one of the given flags in the second bitset.
    boolean
    isAdmin(Object user)
    Returns true, if the user has at least one of the given flags in the second bitset.
    boolean
    isIgnoreAcl(Object user)
    Returns true, if the user has at least one of the given flags in the second bitset.
    boolean
    isMemberOf(Object user, Object group)
    Checks the membership of an user in a group.

  • Method Details

    • findUser

      UserInfo findUser(Object idOrGuidOrName)
      Find the UserInfo object for the given user ID, GUID or name. The returned object contains all groups and flags inhertited from groups or substituted users.
      Parameters:
      idOrGuidOrName - ID, GUID, ELO name or operating sytem name
      Returns:
      UserInfo object or null, if the user cannot be found.

    • hasFlag

      boolean hasFlag(Object user, Number flags)
      Returns true, if the user has at least one of the given flags. If parameter user is an ID, GUID or name, the flags inclusive the inherited flags from groups or substituted users are taken into account. If parameter user is an UserInfo object, only the flags contained in the object are tested.
      Parameters:
      user - UserInfo object, ID, GUID, name or operating system name
      flags - flags to test
      Returns:
      true, if (UserInfo.flags & flags) != 0

    • hasFlag2

      boolean hasFlag2(Object user, Number flags2)
      Returns true, if the user has at least one of the given flags in the second bitset.
      Parameters:
      user - UserInfo object, ID, GUID, name or operating system name
      flags2 - flags to test
      Returns:
      true, if (UserInfo.flags & flags) != 0
      See Also:

    • isAdmin

      boolean isAdmin(Object user)
      Returns true, if the user has at least one of the given flags in the second bitset.
      Parameters:
      user - UserInfo object, ID, GUID, name or operating system name
      Returns:
      true, if (UserInfo.flags & AccessC.FLAG_ADMIN) != 0
      See Also:

    • isIgnoreAcl

      boolean isIgnoreAcl(Object user)
      Returns true, if the user has at least one of the given flags in the second bitset.
      Parameters:
      user - UserInfo object, ID, GUID, name or operating system name
      Returns:
      true, if (UserInfo.flagss & AccessC.FLAG_IGNOREACL) != 0
      See Also:

    • isMemberOf

      boolean isMemberOf(Object user, Object group)
      Checks the membership of an user in a group.
      Parameters:
      user - UserInfo object, ID, GUID, name or operating system name
      group - UserInfo object, ID, GUID, name or operating system name
      Returns:
      true, if the user is member of the group.
      See Also:

    • checkAccess

      boolean checkAccess(Object obj, int lur)
      This function checks whether the current user has at least one of the given access permissions for the object. Only the ACL and the workflow access extension is checked. This function does not invoke the server event script IXServerEvents.checkSordAcces.
      Parameters:
      obj - Object to be accessed. Currently only Sord objects are accepted.
      lur - Combination of AccessC.LUR_* constants.
      Returns:
      true, if access is granted. false, if access is denied.
      See Also: