Class RecordReferenceSecurityHelper

java.lang.Object

com.kingsrook.qqq.backend.core.actions.collaboration.RecordReferenceSecurityHelper

public class RecordReferenceSecurityHelper
extends Object

Core enforcement shared by all record-reference table actions; no session or all-access bypass.

Field Summary

Fields

Modifier and Type	Field	Description
static final String	ADMIN_PERMISSION

Constructor Summary

Constructors

Constructor	Description
RecordReferenceSecurityHelper()

Method Summary

Modifier and Type	Method	Description
static boolean	canReadReference(QTableMetaData table, QRecord record, QBackendTransaction transaction)
static void	copyMirroredLocks(QTableMetaData parentTable, QRecord parent, QTableMetaData extension, QRecord row)
static void	register(QInstance instance)	Register the listener once, during enrichment or qbit installation.
static QQueryFilter	secureFilter(QTableMetaData table, QQueryFilter filter, QBackendTransaction transaction)
static void	validateWrites(QTableMetaData table, List<QRecord> records, RecordChangeType type, QBackendTransaction transaction)	Validate stored and proposed parents, so moving a row cannot evade either policy.
static QRecord	visibleParent(String tableName, Serializable primaryKey, QBackendTransaction transaction)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

ADMIN_PERMISSION

public static final String ADMIN_PERMISSION

See Also:

• Constant Field Values

Constructor Details

RecordReferenceSecurityHelper

public RecordReferenceSecurityHelper()

Method Details

register

public static void register(QInstance instance)

Register the listener once, during enrichment or qbit installation.

secureFilter

public static QQueryFilter secureFilter(QTableMetaData table,
 QQueryFilter filter,
 QBackendTransaction transaction)
                                 throws QException

Throws:

QException

visibleParent

public static QRecord visibleParent(String tableName,
 Serializable primaryKey,
 QBackendTransaction transaction)
                             throws QException

Throws:

QException

canReadReference

public static boolean canReadReference(QTableMetaData table,
 QRecord record,
 QBackendTransaction transaction)
                                throws QException

Throws:

QException

validateWrites

public static void validateWrites(QTableMetaData table,
 List<QRecord> records,
 RecordChangeType type,
 QBackendTransaction transaction)
                           throws QException

Validate stored and proposed parents, so moving a row cannot evade either policy. Always replace client-supplied mirror values.

Throws:

QException

copyMirroredLocks

public static void copyMirroredLocks(QTableMetaData parentTable,
 QRecord parent,
 QTableMetaData extension,
 QRecord row)
                              throws QException

Throws:

QException