public class ResourcePermissionImpl extends ResourcePermissionBaseImpl
The type of resource a permission applies to is specified by the
name attribute. It will either be the numeric ID of a portlet,
or the fully qualified class name of a model (such as a layout or document
library folder).
These permissions can apply in one of four scopes: company, group, group-template, or individual. The scope of a permission determines how broadly it applies to resources in the portal. Company scope is the broadest, and grants a user with the role permissions for every resource of the type within the company. Likewise, group scope gives users with the role permissions for every resource within the specified group, and individual scope only applies to a single resource of the type. Group-template scope is similar to group scope, except that it does not automatically apply to a specific group. A user must be a member of a group (generally either a site or an organization), and they must have been given the role within that group before they are granted its permissions.
Note: Lacking permission to perform an action on a resource at one scope does not necessarily mean that a role does not have permission to perform that action. For instance, a message boards moderator role will not have individual scope permissions to edit every post, but it will have edit permissions at the group or company level, which is sufficient. Every scope must be checked.
The scope of the resource permission also determines the meaning of the
primKey attribute. Its different uses are listed below:
primKey is the primary key of the company
primKey is the primary key of the group the
permission applies within
primKey is always 0
primkey will be the primary key of the instance. If the
permission is for a portlet, primKey will contain the primary
key of the layout containing the portlet, followed by "_LAYOUT_"
and the portlet ID. The instance ID will also be present for instanceable
portlets, preceded by "_INSTANCE_".
The actionIds attribute stores the bitwise IDs of all the
actions allowed by this permission.
ResourceActionImpl,
Serialized FormCOLUMN_BITMASK_ENABLED, COMPANYID_COLUMN_BITMASK, DATA_SOURCE, ENTITY_CACHE_ENABLED, FINDER_CACHE_ENABLED, LOCK_EXPIRATION_TIME, NAME_COLUMN_BITMASK, ORDER_BY_JPQL, ORDER_BY_SQL, PRIMKEY_COLUMN_BITMASK, PRIMKEYID_COLUMN_BITMASK, RESOURCEPERMISSIONID_COLUMN_BITMASK, ROLEID_COLUMN_BITMASK, SCOPE_COLUMN_BITMASK, SESSION_FACTORY, TABLE_COLUMNS, TABLE_COLUMNS_MAP, TABLE_NAME, TABLE_SQL_CREATE, TABLE_SQL_DROP, TX_MANAGER, VIEWACTIONID_COLUMN_BITMASK| Constructor and Description |
|---|
ResourcePermissionImpl() |
| Modifier and Type | Method and Description |
|---|---|
void |
addResourceAction(String actionId) |
boolean |
hasAction(com.liferay.portal.kernel.model.ResourceAction resourceAction) |
boolean |
hasActionId(String actionId) |
void |
removeResourceAction(String actionId) |
persistclone, compareTo, equals, getActionIds, getAttributeGetterFunctions, getAttributeSetterBiConsumers, getColumnBitmask, getCompanyId, getCtCollectionId, getExpandoBridge, getModelAttributes, getModelClass, getModelClassName, getMvccVersion, getName, getOriginalCompanyId, getOriginalName, getOriginalPrimKey, getOriginalPrimKeyId, getOriginalRoleId, getOriginalScope, getOriginalViewActionId, getOwnerId, getPrimaryKey, getPrimaryKeyObj, getPrimKey, getPrimKeyId, getResourcePermissionId, getRoleId, getScope, getViewActionId, hashCode, isEntityCacheEnabled, isFinderCacheEnabled, isViewActionId, resetOriginalValues, setActionIds, setCompanyId, setCtCollectionId, setExpandoBridgeAttributes, setModelAttributes, setMvccVersion, setName, setOwnerId, setPrimaryKey, setPrimaryKeyObj, setPrimKey, setPrimKeyId, setResourcePermissionId, setRoleId, setScope, setViewActionId, toCacheModel, toEscapedModel, toModel, toModels, toString, toXmlStringgetLocale, isCachedModel, isEscapedModel, isNew, setCachedModel, setExpandoBridgeAttributes, setExpandoBridgeAttributes, setNew, toUnescapedModelgetActionIds, getCompanyId, getCtCollectionId, getMvccVersion, getName, getOwnerId, getPrimaryKey, getPrimKey, getPrimKeyId, getResourcePermissionId, getRoleId, getScope, getViewActionId, isViewActionId, setActionIds, setCompanyId, setCtCollectionId, setMvccVersion, setName, setOwnerId, setPrimaryKey, setPrimKey, setPrimKeyId, setResourcePermissionId, setRoleId, setScope, setViewActionIdclone, getAttributeGetterFunctions, getAttributeSetterBiConsumers, getExpandoBridge, getModelAttributes, getPrimaryKeyObj, isCachedModel, isEntityCacheEnabled, isEscapedModel, isFinderCacheEnabled, isNew, resetOriginalValues, setCachedModel, setExpandoBridgeAttributes, setExpandoBridgeAttributes, setExpandoBridgeAttributes, setModelAttributes, setNew, setPrimaryKeyObj, toCacheModel, toEscapedModel, toUnescapedModel, toXmlStringpublic void addResourceAction(String actionId)
throws com.liferay.portal.kernel.exception.PortalException
com.liferay.portal.kernel.exception.PortalExceptionpublic boolean hasAction(com.liferay.portal.kernel.model.ResourceAction resourceAction)
public boolean hasActionId(String actionId)
public void removeResourceAction(String actionId)
throws com.liferay.portal.kernel.exception.PortalException
com.liferay.portal.kernel.exception.PortalException