Class FieldSecurityLockHelper

java.lang.Object

com.kingsrook.qqq.backend.core.actions.permissions.FieldSecurityLockHelper

public final class FieldSecurityLockHelper
extends Object

Compatibility facade for field locks; enforcement is owned by FieldAccessHelper.

Method Summary

Modifier and Type	Method	Description
static void	assertCriteriaAccessible(String tableName, List<QueryJoin> joins, QQueryFilter filter, Collection<String> additionalFieldNames)	Delegate to tier-aware enforcement.
static void	assertWritesAccessible(QTableMetaData table, List<QRecord> records)	Delegate to tier-aware enforcement.
static Set<String>	getDeniedFieldNames(QTableMetaData table)	Only HIDDEN fields retain the legacy denied-field meaning.
static boolean	isFieldAccessible(QFieldMetaData field)	Whether the field is visible in metadata.
static QTableMetaData	removeDeniedFields(QTableMetaData table)	Delegate to tier-aware enforcement.
static void	removeDeniedValues(String tableName, List<QueryJoin> joins, List<QRecord> records)	Delegate to tier-aware enforcement.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Details

isFieldAccessible

public static boolean isFieldAccessible(QFieldMetaData field)

Whether the field is visible in metadata. Read/write checks use the full tier contract.

getDeniedFieldNames

public static Set<String> getDeniedFieldNames(QTableMetaData table)

Only HIDDEN fields retain the legacy denied-field meaning.

removeDeniedFields

public static QTableMetaData removeDeniedFields(QTableMetaData table)

Delegate to tier-aware enforcement.

assertCriteriaAccessible

public static void assertCriteriaAccessible(String tableName,
 List<QueryJoin> joins,
 QQueryFilter filter,
 Collection<String> additionalFieldNames)
                                     throws QPermissionDeniedException

Delegate to tier-aware enforcement.

Throws:

QPermissionDeniedException

assertWritesAccessible

public static void assertWritesAccessible(QTableMetaData table,
 List<QRecord> records)
                                   throws QPermissionDeniedException

Delegate to tier-aware enforcement.

Throws:

QPermissionDeniedException

removeDeniedValues

public static void removeDeniedValues(String tableName,
 List<QueryJoin> joins,
 List<QRecord> records)

Delegate to tier-aware enforcement.