1 // ========================================================================
2 // Copyright (c) 2003-2009 Mort Bay Consulting Pty. Ltd.
3 // ------------------------------------------------------------------------
4 // All rights reserved. This program and the accompanying materials
5 // are made available under the terms of the Eclipse Public License v1.0
6 // and Apache License v2.0 which accompanies this distribution.
7 // The Eclipse Public License is available at
8 // http://www.eclipse.org/legal/epl-v10.html
9 // The Apache License v2.0 is available at
10 // http://www.opensource.org/licenses/apache2.0.php
11 // You may elect to redistribute this code under either of these licenses.
12 // ========================================================================
13
14 package org.eclipse.jetty.plus.jaas;
15
16 import java.security.Principal;
17 import java.security.acl.Group;
18
19
20 public interface RoleCheckPolicy
21 {
22 /* ------------------------------------------------ */
23 /** Check if a role is either a runAsRole or in a set of roles
24 * @param roleName the role to check
25 * @param runAsRole a pushed role (can be null)
26 * @param roles a Group whose Principals are role names
27 * @return <code>true</code> if <code>role</code> equals <code>runAsRole</code> or is a member of <code>roles</code>.
28 */
29 public boolean checkRole (String roleName, Principal runAsRole, Group roles);
30
31 }