Class JoinedTablePermissions

java.lang.Object

com.kingsrook.qqq.middleware.javalin.JoinedTablePermissions

public class JoinedTablePermissions
extends Object

Authorize tables read through client-supplied joins, filters and ordering.

Constructor Summary

Constructors

Constructor	Description
JoinedTablePermissions()

Method Summary

Modifier and Type	Method	Description
static void	checkAssociationReadPermissions(GetInput input)	Get can request the complete association tree.
static void	checkReadPermissions(AbstractTableActionInput input, List<QueryJoin> queryJoins, QQueryFilter filter)	Call after the base table's READ check.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

JoinedTablePermissions

public JoinedTablePermissions()

Method Details

checkReadPermissions

public static void checkReadPermissions(AbstractTableActionInput input,
 List<QueryJoin> queryJoins,
 QQueryFilter filter)
                                 throws QException

Call after the base table's READ check. Resolve a copy because JoinsContext expands joins and security filters. Framework-only security joins enforce the base table's access policy and do not grant the client joined reads.

Throws:

QException

checkAssociationReadPermissions

public static void checkAssociationReadPermissions(GetInput input)
                                            throws QException

Get can request the complete association tree. Follow the same personalized metadata as the root Get and subsequent child queries, while keeping permission evaluation attached to the original HTTP action.

Throws:

QException