1 //
2 // ========================================================================
3 // Copyright (c) 1995-2016 Mort Bay Consulting Pty. Ltd.
4 // ------------------------------------------------------------------------
5 // All rights reserved. This program and the accompanying materials
6 // are made available under the terms of the Eclipse Public License v1.0
7 // and Apache License v2.0 which accompanies this distribution.
8 //
9 // The Eclipse Public License is available at
10 // http://www.eclipse.org/legal/epl-v10.html
11 //
12 // The Apache License v2.0 is available at
13 // http://www.opensource.org/licenses/apache2.0.php
14 //
15 // You may elect to redistribute this code under either of these licenses.
16 // ========================================================================
17 //
18
19 package org.eclipse.jetty.jaas;
20
21 import java.security.Principal;
22 import java.security.acl.Group;
23
24 public interface RoleCheckPolicy
25 {
26 /* ------------------------------------------------ */
27 /** Check if a role is either a runAsRole or in a set of roles
28 * @param roleName the role to check
29 * @param runAsRole a pushed role (can be null)
30 * @param roles a Group whose Principals are role names
31 * @return <code>true</code> if <code>role</code> equals <code>runAsRole</code> or is a member of <code>roles</code>.
32 */
33 public boolean checkRole (String roleName, Principal runAsRole, Group roles);
34
35 }