Interface FieldAccessResolverInterface

public interface FieldAccessResolverInterface

Session-aware policy, reveal grants and value-free access notifications.

Method Summary

Modifier and Type	Method	Description
default void	checkExactMatch(FieldAccessEvent event)	Refuse an exact-match search before execution; the exception message is user-facing.
default String	fingerprintSearchValue(Serializable value)	One-way fingerprint of a search literal.
default String	getAccessFingerprint()	Stable identity of effective access, excluding reveal grants.
default boolean	isRevealActive(String tableName, String fieldName, Serializable primaryKey)	Whether this record and field have an active reveal grant.
default void	onAccess(FieldAccessEvent event)	Receive an audit notification; failures never prevent enforcement.
FieldAccessDecision	resolve(QTableMetaData table, QFieldMetaData field)	Resolve using the current QContext session.

Method Details

resolve

FieldAccessDecision resolve(QTableMetaData table,
 QFieldMetaData field)

Resolve using the current QContext session.

isRevealActive

default boolean isRevealActive(String tableName,
 String fieldName,
 Serializable primaryKey)

Whether this record and field have an active reveal grant.

getAccessFingerprint

default String getAccessFingerprint()

Stable identity of effective access, excluding reveal grants.

onAccess

default void onAccess(FieldAccessEvent event)

Receive an audit notification; failures never prevent enforcement.

checkExactMatch

default void checkExactMatch(FieldAccessEvent event)
                      throws QPermissionDeniedException

Refuse an exact-match search before execution; the exception message is user-facing.

Throws:

QPermissionDeniedException

fingerprintSearchValue

default String fingerprintSearchValue(Serializable value)

One-way fingerprint of a search literal. Raw values never enter access events.