Uses of Class
com.kingsrook.qqq.backend.core.exceptions.QPermissionDeniedException

Packages that use QPermissionDeniedException

Package	Description
com.kingsrook.qqq.backend.core.actions.collaboration
com.kingsrook.qqq.backend.core.actions.permissions
com.kingsrook.qqq.backend.core.actions.permissions.fieldaccess
com.kingsrook.qqq.backend.core.jobs.progress
com.kingsrook.qqq.backend.core.model.actions.tables.query
com.kingsrook.qqq.middleware.javalin
com.kingsrook.qqq.middleware.javalin.specs

Uses of QPermissionDeniedException in com.kingsrook.qqq.backend.core.actions.collaboration

Methods in com.kingsrook.qqq.backend.core.actions.collaboration that throw QPermissionDeniedException

Modifier and Type	Method	Description
static void	RecordFeaturePermissions.requireTableCapability(QTableMetaData table, RecordFeature feature)

Uses of QPermissionDeniedException in com.kingsrook.qqq.backend.core.actions.permissions

Methods in com.kingsrook.qqq.backend.core.actions.permissions that throw QPermissionDeniedException

Modifier and Type	Method	Description
static void	FieldSecurityLockHelper.assertCriteriaAccessible(String tableName, List<QueryJoin> joins, QQueryFilter filter, Collection<String> additionalFieldNames)	Delegate to tier-aware enforcement.
static void	FieldSecurityLockHelper.assertWritesAccessible(QTableMetaData table, List<QRecord> records)	Delegate to tier-aware enforcement.
static void	PermissionsHelper.checkAppPermissionThrowing(AbstractActionInput actionInput, String appName)
void	BulkTableActionProcessPermissionChecker.checkPermissionsThrowing(AbstractActionInput actionInput, MetaDataWithPermissionRules metaDataWithPermissionRules)
void	CustomPermissionChecker.checkPermissionsThrowing(AbstractActionInput actionInput, MetaDataWithPermissionRules metaDataWithPermissionRules)	This is the primary method of the interface, which is called when it's time to check if a user (current session) has permission.
void	ReportProcessPermissionChecker.checkPermissionsThrowing(AbstractActionInput actionInput, MetaDataWithPermissionRules metaDataWithPermissionRules)
void	UseOtherPermissionNameCustomPermissionChecker.checkPermissionsThrowing(AbstractActionInput actionInput, MetaDataWithPermissionRules metaDataWithPermissionRules)	Per CustomPermissionChecker, check if the active session has the permission specified as this class's permissionName property.
void	UseTablePermissionCustomPermissionChecker.checkPermissionsThrowing(AbstractActionInput actionInput, MetaDataWithPermissionRules metaDataWithPermissionRules)	Per CustomPermissionChecker, check if the active session has the permission specified as this class's permissionName property.
static void	PermissionsHelper.checkProcessPermissionThrowing(AbstractActionInput actionInput, String processName)
static void	PermissionsHelper.checkProcessPermissionThrowing(AbstractActionInput actionInput, String processName, Map<String,Serializable> processValues)
static void	PermissionsHelper.checkReportPermissionThrowing(AbstractActionInput actionInput, String reportName)
static void	CorePermissionEnforcer.checkRestoreWriteFlag(AbstractTableActionInput input, Set<ActionFlag> flags)	Reject a write that carries a RestoreWriteFlag unless the session has the RestoreWriteFlag.REQUIRED_PERMISSION permission.
static void	PermissionsHelper.checkTablePermissionThrowing(AbstractTableActionInput tableActionInput, TablePermissionSubType permissionSubType)
static void	PermissionsHelper.checkWidgetPermissionThrowing(AbstractActionInput actionInput, String widgetName)

Uses of QPermissionDeniedException in com.kingsrook.qqq.backend.core.actions.permissions.fieldaccess

Methods in com.kingsrook.qqq.backend.core.actions.permissions.fieldaccess that throw QPermissionDeniedException

Modifier and Type	Method	Description
static FieldAccessHelper.PendingExactMatch	FieldAccessHelper.assertCriteriaAllowed(String tableName, List<QueryJoin> joins, QQueryFilter filter, Collection<String> sortGroupAggregateFieldNames)	Check filters and ordering before querying; successful exact searches are audited once per table.
static FieldAccessHelper.PendingExactMatch	FieldAccessHelper.assertCriteriaAllowed(String tableName, List<QueryJoin> joins, QQueryFilter filter, Collection<String> sortGroupAggregateFieldNames, boolean checkExactMatch)	Criteria-only mode has no fingerprints, guardrail callbacks or audit events.
static void	FieldAccessHelper.assertSelectedFieldsAllowed(String tableName, List<QueryJoin> joins, Collection<String> names)	Selecting masks is allowed; explicit selection of a HIDDEN field retains the legacy denial.
static void	FieldAccessHelper.assertWritesAllowed(QTableMetaData table, List<QRecord> records)	Refuse supplied values, including explicit null, for non-FULL fields.
default void	FieldAccessResolverInterface.checkExactMatch(FieldAccessEvent event)	Refuse an exact-match search before execution; the exception message is user-facing.

Uses of QPermissionDeniedException in com.kingsrook.qqq.backend.core.jobs.progress

Methods in com.kingsrook.qqq.backend.core.jobs.progress that throw QPermissionDeniedException

Modifier and Type	Method	Description
void	JobLogPermissions.checkPermissionsThrowing(AbstractActionInput input, MetaDataWithPermissionRules metadata)	Authorize reads with jobs_job.read; deny user writes regardless of role.

Uses of QPermissionDeniedException in com.kingsrook.qqq.backend.core.model.actions.tables.query

Methods in com.kingsrook.qqq.backend.core.model.actions.tables.query that throw QPermissionDeniedException

Modifier and Type	Method	Description
void	RawReadReason.checkPermission(QueryInput queryInput, QTableMetaData table)	Check that the current session may do this raw read of the given table.

Uses of QPermissionDeniedException in com.kingsrook.qqq.middleware.javalin

Methods in com.kingsrook.qqq.middleware.javalin that throw QPermissionDeniedException

Modifier and Type	Method	Description
static void	TableCapabilities.checkCapabilityThrowing(String tableName, Capability capability)	Throw a permission-denied error when the table lacks the capability.

Uses of QPermissionDeniedException in com.kingsrook.qqq.middleware.javalin.specs

Methods in com.kingsrook.qqq.middleware.javalin.specs that throw QPermissionDeniedException

Modifier and Type	Method	Description
protected void	AbstractEndpointSpec.checkCredentialScopeOperation()	Refuse an operation outside the session's credential scope (if any).