You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@jena.apache.org by gi...@apache.org on 2021/05/25 14:29:11 UTC
[jena-site] branch asf-site updated: Updated site from main
(352171c5bad8fc2f1a6b1416434ef0d89609af61)
This is an automated email from the ASF dual-hosted git repository.
git-site-role pushed a commit to branch asf-site
in repository https://gitbox.apache.org/repos/asf/jena-site.git
The following commit(s) were added to refs/heads/asf-site by this push:
new e5238b9 Updated site from main (352171c5bad8fc2f1a6b1416434ef0d89609af61)
e5238b9 is described below
commit e5238b9cfef9e132b3d82408a8b30160c54518fe
Author: jenkins <bu...@apache.org>
AuthorDate: Tue May 25 14:29:07 2021 +0000
Updated site from main (352171c5bad8fc2f1a6b1416434ef0d89609af61)
---
content/documentation/permissions/evaluator.html | 6 ++++++
content/sitemap.xml | 4 ++--
2 files changed, 8 insertions(+), 2 deletions(-)
diff --git a/content/documentation/permissions/evaluator.html b/content/documentation/permissions/evaluator.html
index b18ed1f..e9515fd 100644
--- a/content/documentation/permissions/evaluator.html
+++ b/content/documentation/permissions/evaluator.html
@@ -178,6 +178,7 @@
<h2 id="overview">Overview</h2>
<p>The SecurityEvaluator interface defines the access control operations. It provides the interface between the authentication (answers the question: “who are you?") and the authorization (answers the question: “what can you do?"), as such it provides access to the current principal (user). The javadocs contain detailed requirements for implementations of the SecurityEvaluator interface, short notes are provided below.</p>
<p><strong>NOTE</strong> The permissions system caches intermediate results and will only call the evaluator if the answer is not already in the cache. There is little or no advantage to implementing caching in the SecurityEvaluator itself.</p>
+<p><strong>NOTE</strong> In earlier versions ReadDeniedException was thrown whenever read permissions were not granted. The current version defines a <code>isHardReadError</code> method that defines what action should be taken. <strong>The default implementation has changed</strong>. See Configuration Methods section below for information.</p>
<h3 id="actions">Actions</h3>
<p>Principals may perform Create, Read, Update or Delete operations on secured resources. These operations are defined in the <code>Action</code> enum in the SecurityEvaluator interface.</p>
<h3 id="node">Node</h3>
@@ -213,6 +214,11 @@
<pre><code>public Object getPrincipal() throws AuthenticationRequiredException;
</code></pre>
<p>Return the current principal or null if there is no current principal.</p>
+<h3 id="configuration-methods">Configuration Methods</h3>
+<p>The evaluator has one configuration method.</p>
+<pre><code>public default boolean isHardReadError()
+</code></pre>
+<p>This method determines how the system will deal with read denied restrictions when attempting to create iterators, counts, or perform existential checks. If set <code>true</code> the system will throw a <code>ReadDeniedException</code>. This is the action that was perfomed in Jena version 3 and earlier. If set <code>false</code>, the default, methods that return iterators return empty iterators, methods that perform existential checks return <code>false</code>, and methods that r [...]
<h2 id="sample-implementation">Sample Implementation</h2>
<p>This sample is for a graph that contains a set of messages, access to the messages are limited to
principals that the messages are to or from. Any triple that is not a message is not affected. This
diff --git a/content/sitemap.xml b/content/sitemap.xml
index 04afdd7..ea43697 100644
--- a/content/sitemap.xml
+++ b/content/sitemap.xml
@@ -314,7 +314,7 @@
<url>
<loc>https://jena.apache.org/documentation.html</loc>
- <lastmod>2021-05-17T10:22:48+01:00</lastmod>
+ <lastmod>2021-05-20T19:16:57+01:00</lastmod>
</url>
<url>
@@ -559,7 +559,7 @@
<url>
<loc>https://jena.apache.org/documentation/permissions/evaluator.html</loc>
- <lastmod>2020-12-01T10:14:11-05:00</lastmod>
+ <lastmod>2021-05-20T19:16:57+01:00</lastmod>
</url>
<url>