OSID Logo
OSID Specifications
authorization rules package
Version 3.0.0
Release Candidate Preview
Interfaceosid.authorization.rules.AuthorizationEnablerLookupSession
Implementsosid.OsidSession
Description

This session provides methods for retrieving AuthorizationEnablers.

This session defines views that offer differing behaviors when retrieving multiple objects.

  • comparative view: elements may be silently omitted or re-ordered
  • plenary view: provides a complete set or is an error condition
  • isolated vault view: All authorization enabler methods in this session operate, retrieve and pertain to authorization enablers defined explicitly in the current vault. Using an isolated view is useful for managing AuthorizationEnablers with the AuthorizationEnablerAdminSession.
  • federated vault view: All authorization enabler methods in this session operate, retrieve and pertain to all authorization enablers defined in this vault and any other authorization enablers implicitly available in this vault through vault inheritence.
  • active authorization enabler view: All authorization enabler lookup methods return active authorization enablers.
  • any status authorization enabler view: Authorization enablers of any active or inactive status are returned from methods.

Generally, the comparative view should be used for most applications as it permits operation even if there is data that cannot be accessed. The methods useFederatedDistributorView() and useIsolatedDistributorView() behave as a radio group and one should be selected before invoking the methods in this session.

MethodgetVaultId
Description

Gets the Vault Id associated with this session.

Returnosid.id.Idthe Vault Id associated with this session
CompliancemandatoryThis method must be implemented.
MethodgetVault
Description

Gets the Vault associated with this session.

Returnosid.authorization.Vaultthe vault
ErrorsOPERATION_FAILEDunable to complete request
PERMISSION_DENIEDauthorization failure
CompliancemandatoryThis method must be implemented.
MethodcanLookupAuthorizationEnablers
Description

Tests if this user can perform AuthorizationEnablers lookups. A return of true does not guarantee successful authorization. A return of false indicates that it is known all methods in this session will result in a PERMISSION_DENIED. This is intended as a hint to an application that may opt not to offer lookup operations to unauthorized users.

Returnboolean false if lookup methods are not authorized, true otherwise
CompliancemandatoryThis method must be implemented.
MethoduseComparativeAuthorizationEnablerView
Description

The returns from the lookup methods may omit or translate elements based on this session, such as authorization, and not result in an error. This view is used when greater interoperability is desired at the expense of precision.

CompliancemandatoryThis method is must be implemented.
MethodusePlenaryAuthorizationEnablerView
Description

A complete view of the AuthorizationEnabler returns is desired. Methods will return what is requested or result in an error. This view is used when greater precision is desired at the expense of interoperability.

CompliancemandatoryThis method is must be implemented.
MethoduseFederatedVaultView
Description

Federates the view for methods in this session. A federated view will include authorization enablers in vaults which are children of this vault in the vault hierarchy.

CompliancemandatoryThis method is must be implemented.
MethoduseIsolatedVaultView
Description

Isolates the view for methods in this session. An isolated view restricts lookups to this vault only.

CompliancemandatoryThis method is must be implemented.
MethoduseActiveAuthorizationEnablerView
Description

Only active authorization enablers are returned by methods in this session.

CompliancemandatoryThis method is must be implemented.
MethoduseAnyStatusAuthorizationEnablerView
Description

All active and inactive authorization enablers are returned by methods in this session.

CompliancemandatoryThis method is must be implemented.
MethodgetAuthorizationEnabler
Description

Gets the AuthorizationEnabler specified by its Id.

In plenary mode, the exact Id is found or a NOT_FOUND results. Otherwise, the returned AuthorizationEnabler may have a different Id than requested, such as the case where a duplicate Id was assigned to an AuthorizationEnabler and retained for compatibility.

In active mode, authorization enablers are returned that are currently active. In any status mode, active and inactive authorization enablers are returned.

Parametersosid.id.IdauthorizationEnablerId Id of the AuthorizationEnabler
Returnosid.authorization.rules.AuthorizationEnablerthe authorization enabler
ErrorsNOT_FOUND authorizationEnablerId not found
NULL_ARGUMENT authorizationEnablerId is null
OPERATION_FAILEDunable to complete request
PERMISSION_DENIEDauthorization failure
CompliancemandatoryThis method is must be implemented.
MethodgetAuthorizationEnablersByIds
Description

Gets an AuthorizationEnablerList corresponding to the given IdList.

In plenary mode, the returned list contains all of the authorization enablers specified in the Id list, in the order of the list, including duplicates, or an error results if an Id in the supplied list is not found or inaccessible. Otherwise, inaccessible AuthorizationEnablers may be omitted from the list and may present the elements in any order including returning a unique set.

In active mode, authorization enablers are returned that are currently active. In any status mode, active and inactive authorization enablers are returned.

Parametersosid.id.IdListauthorizationEnablerIdsthe list of Ids to retrieve
Returnosid.authorization.rules.AuthorizationEnablerListthe returned AuthorizationEnabler list
ErrorsNOT_FOUNDan Id was not found
NULL_ARGUMENT authorizationEnablerIds is null
OPERATION_FAILEDunable to complete request
PERMISSION_DENIEDauthorization failure
CompliancemandatoryThis method must be implemented.
MethodgetAuthorizationEnablersByGenusType
Description

Gets an AuthorizationEnablerList corresponding to the given authorization enabler genus Type which does not include authorization enablers of genus types derived from the specified Type.

In plenary mode, the returned list contains all known authorization enablers or an error results. Otherwise, the returned list may contain only those authorization enablers that are accessible through this session.

In active mode, authorization enablers are returned that are currently active. In any status mode, active and inactive authorization enablers are returned.

Parametersosid.type.TypeauthorizationEnablerGenusTypean authorization enabler genus type
Returnosid.authorization.rules.AuthorizationEnablerListthe returned AuthorizationEnabler list
ErrorsNULL_ARGUMENT authorizationEnablerGenusType is null
OPERATION_FAILEDunable to complete request
PERMISSION_DENIEDauthorization failure
CompliancemandatoryThis method must be implemented.
MethodgetAuthorizationEnablersByParentGenusType
Description

Gets an AuthorizationEnablerList corresponding to the given authorization enabler genus Type and include any additional authorization enablers with genus types derived from the specified Type.

In plenary mode, the returned list contains all known authorization enablers or an error results. Otherwise, the returned list may contain only those authorization enablers that are accessible through this session.

In active mode, authorization enablers are returned that are currently active. In any status mode, active and inactive authorization enablers are returned.

Parametersosid.type.TypeauthorizationEnablerGenusTypean authorization enabler genus type
Returnosid.authorization.rules.AuthorizationEnablerListthe returned AuthorizationEnabler list
ErrorsNULL_ARGUMENT authorizationEnablerGenusType is null
OPERATION_FAILEDunable to complete request
PERMISSION_DENIEDauthorization failure
CompliancemandatoryThis method must be implemented.
MethodgetAuthorizationEnablersByRecordType
Description

Gets an AuthorizationEnablerList containing the given authorization enabler record Type.

In plenary mode, the returned list contains all known authorization enablers or an error results. Otherwise, the returned list may contain only those authorization enablers that are accessible through this session.

In active mode, authorization enablers are returned that are currently active. In any status mode, active and inactive authorization enablers are returned.

Parametersosid.type.TypeauthorizationEnablerRecordTypean authorization enabler record type
Returnosid.authorization.rules.AuthorizationEnablerListthe returned AuthorizationEnabler list
ErrorsNULL_ARGUMENT authorizationEnablerRecordType is null
OPERATION_FAILEDunable to complete request
PERMISSION_DENIEDauthorization failure
CompliancemandatoryThis method must be implemented.
MethodgetAuthorizationEnablersOnDate
Description

Gets an AuthorizationEnablerList that are effective for the entire given date range inclusive but not confined to the date range for any agent.

In plenary mode, the returned list contains all known authorization enablers or an error results. Otherwise, the returned list may contain only those authorization enablers that are accessible through this session.

In active mode, authorization enablers are returned that are currently active in addition to being effective during the given date range. In any status mode, active and inactive authorization enablers are returned.

Parametersosid.calendaring.DateTimefroma start date
osid.calendaring.DateTimetoan end date
Returnosid.authorization.rules.AuthorizationEnablerListthe returned AuthorizationEnabler list
ErrorsINVALID_ARGUMENT from is greater than to
NULL_ARGUMENT from, or to is null
OPERATION_FAILEDunable to complete request
PERMISSION_DENIEDauthorization failure
CompliancemandatoryThis method must be implemented.
MethodgetAuthorizationEnablersOnDateWithAgent
Description

Gets an AuthorizationEnablerList that are effective for the entire given date range and evaluated against the given agent.

In plenary mode, the returned list contains all known authorization enablers or an error results. Otherwise, the returned list may contain only those authorization enablers that are accessible through this session.

In active mode, authorization enablers are returned that are currently active in addition to being effective in the given date range for the given agent. In any status mode, active and inactive authorization enablers are returned.

Parametersosid.id.IdagentIdan agent Id
osid.calendaring.DateTimefroma start date
osid.calendaring.DateTimetoan end date
Returnosid.authorization.rules.AuthorizationEnablerListthe returned AuthorizationEnabler list
ErrorsINVALID_ARGUMENT from is greater than to
NULL_ARGUMENT agentId, from, or to is null
OPERATION_FAILEDunable to complete request
PERMISSION_DENIEDauthorization failure
CompliancemandatoryThis method must be implemented.
MethodgetAuthorizationEnablers
Description

Gets all AuthorizationEnablers.

In plenary mode, the returned list contains all known authorization enablers or an error results. Otherwise, the returned list may contain only those authorization enablers that are accessible through this session.

In active mode, authorization enablers are returned that are currently active. In any status mode, active and inactive authorization enablers are returned.

Returnosid.authorization.rules.AuthorizationEnablerListthe returned AuthorizationEnabler list
ErrorsOPERATION_FAILEDunable to complete request
PERMISSION_DENIEDauthorization failure
CompliancemandatoryThis method must be implemented.