Lines Matching defs:principal

38  * set of permissions associated with a particular principal. (A
39 * principal represents an entity such as an individual user or a
42 * granted to the associated principal. If negative, the permissions
47 * <ul> <li>Each principal can have at most one positive ACL entry and
49 * entries are not allowed for any principal. Each entry specifies
53 * <li>If there is no entry for a particular principal, then the
54 * principal is considered to have a null (empty) permission set.<p>
56 * <li>If there is a positive entry that grants a principal a
58 * principal the same permission, the result is as though the
96 * @param caller the principal invoking this method. It must be an
101 * @exception NotOwnerException if the caller principal
119 * Adds an ACL entry to this ACL. An entry associates a principal
121 * permissions. Each principal can have at most one positive ACL
122 * entry (specifying permissions to be granted to the principal)
127 * @param caller the principal invoking this method. It must be an
133 * (positive or negative) for the same principal is already
136 * @exception NotOwnerException if the caller principal
145 * @param caller the principal invoking this method. It must be an
152 * @exception NotOwnerException if the caller principal is not
160 * specified principal (representing an entity such as an individual or
167 * specified principal, an empty permission set is returned.<p>
169 * <li>Otherwise, the principal's group permission sets are determined.
170 * (A principal can belong to one or more groups, where a group is a
173 * the positive permissions of each group that the principal belongs to.
175 * the negative permissions of each group that the principal belongs to.
182 * specified in the positive ACL entry (if any) for the principal.
184 * specified in the negative ACL entry (if any) for the principal.
187 * principal in this ACL.<p>
189 * The set of permissions granted to the principal is then calculated
191 * the group permissions. That is, the principal's individual negative
193 * positive permission set, and the principal's individual positive
198 * @param user the principal whose permission set is to be returned.
200 * @return the permission set specifying the permissions the principal
214 * Checks whether or not the specified principal has the specified
218 * is a member of the allowed permission set of the specified principal.
222 * @param principal the principal, assumed to be a valid authenticated
227 * @return true if the principal has the specified permission, false
232 public boolean checkPermission(Principal principal, Permission permission);