com.sun.appserv.security
Class AuditModule

java.lang.Object
  com.sun.appserv.security.AuditModule

public abstract class AuditModule
extends Object

Base class that should be extended by all classes that wish to provide their own Audit support.

Version:

Author:

Harpreet Singh

Constructor Summary

AuditModule()

Method Summary

void	authentication(String user, String realm, boolean success) Invoked post authentication request for a user in a given realm
void	ejbAsWebServiceInvocation(String endpoint, boolean success) Invoked during validation of the web service request
void	ejbInvocation(String user, String ejb, String method, boolean success) Invoked post ejb authorization request.
void	init(Properties props) Method is invoked at server startup, during AuditModule initialization.
void	serverShutdown() Invoked upon completion of the server shutdown
void	serverStarted() Invoked upon completion of the server startup
void	webInvocation(String user, HttpServletRequest req, String type, boolean success) Invoked post web authorization request.
void	webServiceInvocation(String uri, String endpoint, boolean success) Invoked during validation of the web service request

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AuditModule

public AuditModule()

Method Detail

init

public void init(Properties props)

Method is invoked at server startup, during AuditModule initialization. If method returns without any exception then S1AS assumes that the module is ready to serve any requests.

Parameters:

props - the properties for the AuditModule. These properties are defined in the domain.xml

authentication

public void authentication(String user,
                           String realm,
                           boolean success)

Invoked post authentication request for a user in a given realm

Parameters:

user - username for whom the authentication request was made

realm - the realm name under which the user is authenticated.

success - the status of the authentication

webInvocation

public void webInvocation(String user,
                          HttpServletRequest req,
                          String type,
                          boolean success)

Invoked post web authorization request.

Parameters:

user - the username for whom the authorization was performed

req - the HttpRequest object for the web request

type - the permission type, hasUserDataPermission or hasResourcePermission.

success - the status of the web authorization request

ejbInvocation

public void ejbInvocation(String user,
                          String ejb,
                          String method,
                          boolean success)

Invoked post ejb authorization request.

Parameters:

user - the username for whom the authorization was performed

ejb - the ejb name for which this authorization was performed

method - the method name for which this authorization was performed

success - the status of the ejb authorization request

webServiceInvocation

public void webServiceInvocation(String uri,
                                 String endpoint,
                                 boolean success)

Invoked during validation of the web service request

Parameters:

uri - The URL representation of the web service endpoint

endpoint - The name of the endpoint representation

success - the status of the web service request validation

ejbAsWebServiceInvocation

public void ejbAsWebServiceInvocation(String endpoint,
                                      boolean success)

Invoked during validation of the web service request

Parameters:

endpoint - The representation of the web service endpoint

success - the status of the web service request validation

serverStarted

public void serverStarted()

Invoked upon completion of the server startup

serverShutdown

public void serverShutdown()

Invoked upon completion of the server shutdown