org.onosproject.security.store

Class DistributedSecurityModeStore

java.lang.Object

org.onosproject.store.AbstractStore<SecurityModeEvent,SecurityModeStoreDelegate>

org.onosproject.security.store.DistributedSecurityModeStore

All Implemented Interfaces:

SecurityModeStore, Store<SecurityModeEvent,SecurityModeStoreDelegate>

@Service
public class DistributedSecurityModeStore
extends AbstractStore<SecurityModeEvent,SecurityModeStoreDelegate>
implements SecurityModeStore

Manages application permissions granted/requested to applications. Uses both gossip-based and RAFT-based distributed data store.

Field Summary

Fields

Modifier and Type	Field and Description
protected ApplicationAdminService	applicationAdminService
protected LogicalClockService	clockService
protected org.apache.karaf.features.FeaturesService	featuresService
protected StorageService	storageService

Fields inherited from class org.onosproject.store.AbstractStore

delegate

Constructor Summary

Constructors

Constructor and Description
DistributedSecurityModeStore()

Method Summary

Modifier and Type	Method and Description
void	acceptPolicy(ApplicationId appId, Set<Permission> permissionSet) Accept the current security policy of given application.
void	activate()
void	deactivate()
Set<ApplicationId>	getApplicationIds(String location) Returns application identifiers that are associated with given bundle location.
Set<String>	getBundleLocations(ApplicationId appId) Returns bundle locations of specified application.
Set<Permission>	getGrantedPermissions(ApplicationId appId) Returns an array of permissions that have been granted to given application.
Set<Permission>	getRequestedPermissions(ApplicationId appId) Returns a list of permissions that have been requested by given application.
SecurityModeState	getState(ApplicationId appId) Returns state of the specified application.
boolean	isSecured(ApplicationId appId) Returns true if given application has been secured.
boolean	registerApplication(ApplicationId appId) Updates the local bundle-application directories.
void	requestPermission(ApplicationId appId, Permission permission) Request permission that is required to run given application.
void	reviewPolicy(ApplicationId appId) Notifies SM-ONOS that operator has reviewed the policy.
void	unregisterApplication(ApplicationId appId) Removes application info from the local bundle-application directories.

Methods inherited from class org.onosproject.store.AbstractStore

hasDelegate, notifyDelegate, notifyDelegate, setDelegate, unsetDelegate

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.onosproject.store.Store

hasDelegate, setDelegate, unsetDelegate

Field Detail

storageService

@Reference(cardinality=MANDATORY_UNARY)
protected StorageService storageService

clockService

@Reference(cardinality=MANDATORY_UNARY)
protected LogicalClockService clockService

applicationAdminService

@Reference(cardinality=MANDATORY_UNARY)
protected ApplicationAdminService applicationAdminService

featuresService

@Reference(cardinality=MANDATORY_UNARY)
protected org.apache.karaf.features.FeaturesService featuresService

Constructor Detail

DistributedSecurityModeStore

public DistributedSecurityModeStore()

Method Detail

activate

@Activate
public void activate()

deactivate

@Deactivate
public void deactivate()

getBundleLocations

public Set<String> getBundleLocations(ApplicationId appId)

Description copied from interface: SecurityModeStore

Returns bundle locations of specified application.

Specified by:

getBundleLocations in interface SecurityModeStore

Parameters:

appId - application identifier

Returns:

set of bundle location strings

getApplicationIds

public Set<ApplicationId> getApplicationIds(String location)

Description copied from interface: SecurityModeStore

Returns application identifiers that are associated with given bundle location.

Specified by:

getApplicationIds in interface SecurityModeStore

Parameters:

location - OSGi bundle location

Returns:

set of application identifiers

getRequestedPermissions

public Set<Permission> getRequestedPermissions(ApplicationId appId)

Description copied from interface: SecurityModeStore

Returns a list of permissions that have been requested by given application.

Specified by:

getRequestedPermissions in interface SecurityModeStore

Parameters:

appId - application identifier

Returns:

list of permissions

getGrantedPermissions

public Set<Permission> getGrantedPermissions(ApplicationId appId)

Description copied from interface: SecurityModeStore

Returns an array of permissions that have been granted to given application.

Specified by:

getGrantedPermissions in interface SecurityModeStore

Parameters:

appId - application identifier

Returns:

array of permissionInfo

requestPermission

public void requestPermission(ApplicationId appId,
                              Permission permission)

Description copied from interface: SecurityModeStore

Request permission that is required to run given application.

Specified by:

requestPermission in interface SecurityModeStore

Parameters:

appId - application identifier

permission - permission

isSecured

public boolean isSecured(ApplicationId appId)

Description copied from interface: SecurityModeStore

Returns true if given application has been secured.

Specified by:

isSecured in interface SecurityModeStore

Parameters:

appId - application identifier

Returns:

true indicates secured

reviewPolicy

public void reviewPolicy(ApplicationId appId)

Description copied from interface: SecurityModeStore

Notifies SM-ONOS that operator has reviewed the policy.

Specified by:

reviewPolicy in interface SecurityModeStore

Parameters:

appId - application identifier

acceptPolicy

public void acceptPolicy(ApplicationId appId,
                         Set<Permission> permissionSet)

Description copied from interface: SecurityModeStore

Accept the current security policy of given application.

Specified by:

acceptPolicy in interface SecurityModeStore

Parameters:

appId - application identifier

permissionSet - array of PermissionInfo

registerApplication

public boolean registerApplication(ApplicationId appId)

Description copied from interface: SecurityModeStore

Updates the local bundle-application directories.

Specified by:

registerApplication in interface SecurityModeStore

Parameters:

appId - application identifier

Returns:

true if successfully registered.

unregisterApplication

public void unregisterApplication(ApplicationId appId)

Description copied from interface: SecurityModeStore

Removes application info from the local bundle-application directories.

Specified by:

unregisterApplication in interface SecurityModeStore

Parameters:

appId - application identifier

getState

public SecurityModeState getState(ApplicationId appId)

Description copied from interface: SecurityModeStore

Returns state of the specified application.

Specified by:

getState in interface SecurityModeStore

Parameters:

appId - application identifier

Returns:

Security-Mode State of application