1 //
2 // ========================================================================
3 // Copyright (c) 1995-2013 Mort Bay Consulting Pty. Ltd.
4 // ------------------------------------------------------------------------
5 // All rights reserved. This program and the accompanying materials
6 // are made available under the terms of the Eclipse Public License v1.0
7 // and Apache License v2.0 which accompanies this distribution.
8 //
9 // The Eclipse Public License is available at
10 // http://www.eclipse.org/legal/epl-v10.html
11 //
12 // The Apache License v2.0 is available at
13 // http://www.opensource.org/licenses/apache2.0.php
14 //
15 // You may elect to redistribute this code under either of these licenses.
16 // ========================================================================
17 //
18
19 package org.eclipse.jetty.jaas;
20
21 import java.security.Principal;
22 import java.security.acl.Group;
23
24
25 public interface RoleCheckPolicy
26 {
27 /* ------------------------------------------------ */
28 /** Check if a role is either a runAsRole or in a set of roles
29 * @param roleName the role to check
30 * @param runAsRole a pushed role (can be null)
31 * @param roles a Group whose Principals are role names
32 * @return <code>true</code> if <code>role</code> equals <code>runAsRole</code> or is a member of <code>roles</code>.
33 */
34 public boolean checkRole (String roleName, Principal runAsRole, Group roles);
35
36 }