com.sibvisions.rad.server.security
Class AbstractSecurityManager

java.lang.Object
  com.sibvisions.rad.server.security.AbstractSecurityManager

All Implemented Interfaces:

ISecurityManager, IPasswordValidator

Direct Known Subclasses:

DBSecurityManager, XmlSecurityManager

public abstract class AbstractSecurityManager
extends Object
implements ISecurityManager, IPasswordValidator

The AbstractSecurityManager is the base class for ISecurityManager implementations but it does not implement the security methods. It supports security managers with important and usable methods.

Constructor Summary

AbstractSecurityManager()

Method Summary

void	checkPassword(ISession pSession, String pPassword) Checks if a password is strength enough to be used.
protected boolean	comparePassword(String pPassword, String pConfirmPassword) Compares two passwords to be identical.
protected IPasswordValidator	getPasswordValidator(IConfiguration pConfig) Gets the password validator from an application configuration.
protected void	validatePassword(ISession pSession, String pOldPassword, String pNewPassword) Validates a new password against an old password an uses a preconfigured password validator for checking the strength of the new password.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface com.sibvisions.rad.server.security.ISecurityManager

changePassword, logout, validateAuthentication

Constructor Detail

AbstractSecurityManager

public AbstractSecurityManager()

Method Detail

checkPassword

public void checkPassword(ISession pSession,
                          String pPassword)

Checks if a password is strength enough to be used.

Specified by:

checkPassword in interface IPasswordValidator

Parameters:

pSession - the session which wants to change the password

pPassword - the new password

comparePassword

protected boolean comparePassword(String pPassword,
                                  String pConfirmPassword)

Compares two passwords to be identical.

Parameters:

pPassword - base password

pConfirmPassword - confiration password

Returns:

true if the passwords are identical, otherwise false

getPasswordValidator

protected IPasswordValidator getPasswordValidator(IConfiguration pConfig)

Gets the password validator from an application configuration.

Parameters:

pConfig - the application configuration

Returns:

the IPasswordValidator or null if no validator is specified

validatePassword

protected void validatePassword(ISession pSession,
                                String pOldPassword,
                                String pNewPassword)
                         throws Exception

Validates a new password against an old password an uses a preconfigured password validator for checking the strength of the new password.

Parameters:

pSession - the session which changes the password

pOldPassword - the old/current password

pNewPassword - the new password

Throws:

Exception - if the password validation failed, e.g. old = new, new is not strength enough, ...