Field Detail

• protected boolean roleConvertDashes

• protected java.lang.String roleStripPrefix

• protected java.lang.String roleStripSuffix

• protected boolean roleToUpperCase

Property Detail

• java.lang.Boolean retrieveDatabaseRoles

  Dependency injection for whether to retrieve roles from the database in addition to LDAP.

• GrailsUserDetailsService userDetailsService

  Dependency injection for the user details service.

Constructor Detail

• GrailsLdapAuthoritiesPopulator(ContextSource contextSource, java.lang.String groupSearchBase)

  Constructor for group search scenarios. userRoleAttributes may still be set as a property.

  Parameters:

  contextSource - supplies the contexts used to search for user roles.

  groupSearchBase - if this is an empty string the search will be performed from the root DN of the context factory.

Method Detail

• void afterPropertiesSet()

• GrantedAuthority cleanRole(GrantedAuthority role)

  This cleans a role based on configuration flags set.

  Parameters:

  role - the role to clean

  Returns:

  the cleaned role

• @java.lang.Override
  protected java.util.Set<GrantedAuthority> getAdditionalRoles(DirContextOperations user, java.lang.String username)

• @java.lang.Override
  java.util.Set<GrantedAuthority> getGroupMembershipRoles(java.lang.String userDn, java.lang.String username)

• void setRoleConvertDashes(boolean convertDashes)

  Dependency injection for whether or not to convert all dashes to underscores if found in a group name before it is made into a role.

  Parameters:

  convertDashes - if true, all dashes are converted to underscores

• void setRoleStripPrefix(java.lang.String prefix)

  Dependency injection for whether or not to remove a prefix string from a LDAP group name if it matches the beginning of the group name, but not the full name of the group.

  Parameters:

  prefix - if not null, this is stripped from the group name before it is made into a role

• void setRoleStripSuffix(java.lang.String suffix)

  Dependency injection for whether or not to remove a suffix string from a LDAP group name if it matches the end of the group name, but not the full name of the group.

  Parameters:

  suffix - if not null, this is stripped from the group name before it is made into a role

• void setRoleToUpperCase(boolean toUpperCase)

  Dependency injection for whether or not to convert group names to uppercase before they are made into roles.

  Parameters:

  toUpperCase - if true, roles are converted to uppercase

• protected void updateRoleStripPrefix()

  Hooks to adjust prefix string if other cleaning flags are set

• protected void updateRoleStripSuffix()

  Hooks to adjust suffix string if other cleaning flags are set