org.eclipse.stardust.engine.core.runtime.utils

Annotation Type ExecutionPermission

@Retention(value=RUNTIME)
@Target(value=METHOD)
@Documented
public @interface ExecutionPermission

Version:

$Revision: $

Author:

Florin.Herinean

Optional Element Summary

Optional Elements

Modifier and Type	Optional Element and Description
boolean	administratorOverride Specifies that an administrator can override the permission settings and perform the method even if it is not explicitly present in the permission list.
boolean	changeable Specifies that model permissions should be considered instead of the default ones defined in the permission annotation.
ExecutionPermission.Default[]	defaults Specifies which permissions are considered in the case that the model does not specify any permission or changeable is false.
boolean	defer Specifies that the permissions check will not be performed before invocation, instead it will be deferred and performed in the called method.
ExecutionPermission.Default[]	fixed Specifies which permissions are always present in addition to the ones defined in the model.
ExecutionPermission.Id	id Specifies the identifier of the permission.
ExecutionPermission.Id[]	implied Specifies that the implied permission(s) could be used instead of this one.
ExecutionPermission.Scope	scope Specifies the scope of the permission, which can be one of: model - permission applies to the active model. process - permission applies to the accessed process instance(s). activity - permission applies to the accessed activity instance(s). data - permission applies to the accessed data object(s).

Element Detail

id

public abstract ExecutionPermission.Id id

Specifies the identifier of the permission.

Returns:

a string containing the identifier.

Default:

org.eclipse.stardust.engine.core.runtime.utils.ExecutionPermission.Id.none

scope

public abstract ExecutionPermission.Scope scope

Specifies the scope of the permission, which can be one of:

• model - permission applies to the active model.
• process - permission applies to the accessed process instance(s).
• activity - permission applies to the accessed activity instance(s).
• data - permission applies to the accessed data object(s).

Returns:

the scope of the permission.

Default:

org.eclipse.stardust.engine.core.runtime.utils.ExecutionPermission.Scope.model

defaults

public abstract ExecutionPermission.Default[] defaults

Specifies which permissions are considered in the case that the model does not specify any permission or changeable is false.

Returns:

the list of default permissions.

Default:

org.eclipse.stardust.engine.core.runtime.utils.ExecutionPermission.Default.ADMINISTRATOR

fixed

public abstract ExecutionPermission.Default[] fixed

Specifies which permissions are always present in addition to the ones defined in the model.

Returns:

the list of default permissions.

Default:

{}

changeable

public abstract boolean changeable

Specifies that model permissions should be considered instead of the default ones defined in the permission annotation. A value of false means that model permissions will be ignored and only the default permissions defined in the annotation will be used.

Returns:

true if the permissions defined in the model should be considered.

Default:

true

administratorOverride

public abstract boolean administratorOverride

Specifies that an administrator can override the permission settings and perform the method even if it is not explicitly present in the permission list.

Returns:

true if administrators are always allowed to perform this method.

Default:

true

defer

public abstract boolean defer

Specifies that the permissions check will not be performed before invocation, instead it will be deferred and performed in the called method. The engine will only set an Authorization2Predicate in the runtime environment and it is the sole responsibility of the called method to use this predicate.

Returns:

true if the permission check should be deferred.

Default:

false

implied

public abstract ExecutionPermission.Id[] implied

Specifies that the implied permission(s) could be used instead of this one.

Returns:

the implied Id

Default:

{}