public class MostSpecificProtectedItemFilter extends Object implements ACITupleFilter
ACITupleFilter
that chooses the tuples with the most specific
protected item. (18.8.4.3, X.501)
If more than one tuple remains, choose the tuples with the most specific protected item. If the protected item is an attribute and there are tuples that specify the attribute type explicitly, discard all other tuples. If the protected item is an attribute value, and there are tuples that specify the attribute value explicitly, discard all other tuples. A protected item which is a rangeOfValues is to be treated as specifying an attribute value explicitly.
ACI_LOG
Constructor and Description |
---|
MostSpecificProtectedItemFilter() |
Modifier and Type | Method and Description |
---|---|
Collection<org.apache.directory.api.ldap.aci.ACITuple> |
filter(AciContext aciContext,
OperationScope scope,
org.apache.directory.api.ldap.model.entry.Entry userEntry)
Returns the collection of the filtered tuples using the specified
extra information.
|
public MostSpecificProtectedItemFilter()
public Collection<org.apache.directory.api.ldap.aci.ACITuple> filter(AciContext aciContext, OperationScope scope, org.apache.directory.api.ldap.model.entry.Entry userEntry) throws org.apache.directory.api.ldap.model.exception.LdapException
filter
in interface ACITupleFilter
aciContext
- the container for ACI itemsscope
- the scope of the operation to be performeduserEntry
- the Entry
of the current user entry in the DITorg.apache.directory.api.ldap.model.exception.LdapException
- if failed to filter the specific tuplesCopyright © 2003–2020 The Apache Software Foundation. All rights reserved.