hirondelle.web4j.security
Interface FetchIdentifierOwner

public interface FetchIdentifierOwner

Look up the login name of the user who owns an untrusted identifer.

See the User Guide and UntrustedProxyForUserId for important information regarding this interface.

Method Summary

Id	fetchOwner() Return the user login name of the user that 'owns' the untrusted proxy for the user id used in the current request.

Method Detail

fetchOwner

Id fetchOwner()
              throws AppException

Return the user login name of the user that 'owns' the untrusted proxy for the user id used in the current request. If an owner cannot be found, then return null.

The meaning of the untrusted identifier depends on the context, and changes for each action/operation. A typical implmentation will follow these steps:

• use a request parameter value, whose value contains the untrusted identifier
• the value of the untrusted identifier is then passed to a SELECT statement, which returns a single value - the owner's login name

Throws:

AppException