1 package org.jbpm.security.authorizer; 2 3 import java.security.*; 4 5 import org.jbpm.graph.def.*; 6 import org.jbpm.graph.exe.*; 7 8 /** 9 * defines the interface for plugging in authorization mechanisms into jBPM. 10 * 11 * <p> 12 * If Authroization implementations need the current authenticated user, they 13 * can look that up via {@link org.jbpm.security.Authentication#getAuthenticatedActorId()}. 14 * </p> 15 */ 16 public interface Authorizer { 17 18 /** 19 * verify if the currently authenticated has the given permission. 20 * @throws AccessControlException if the current authenticated actor is not 21 * authorized. 22 */ 23 void checkPermission(Permission permission, ProcessDefinition processDefinition, Token token) 24 throws AccessControlException; 25 } 26