Author: buildbot
Date: Tue Sep 17 22:34:03 2013
New Revision: 878872
Log:
Staging update by buildbot for jena
Modified:
websites/staging/jena/trunk/content/ (props changed)
websites/staging/jena/trunk/content/documentation/security/index.html
Propchange: websites/staging/jena/trunk/content/
------------------------------------------------------------------------------
--- cms:source-revision (original)
+++ cms:source-revision Tue Sep 17 22:34:03 2013
@@ -1 +1 @@
-1523557
+1524244
Modified: websites/staging/jena/trunk/content/documentation/security/index.html
==============================================================================
--- websites/staging/jena/trunk/content/documentation/security/index.html
(original)
+++ websites/staging/jena/trunk/content/documentation/security/index.html Tue
Sep 17 22:34:03 2013
@@ -213,7 +213,7 @@ the user can access a graph by executing
<p>if the user can access the graph then the system will execute</p>
-<div class="codehilite"><pre><span class="n">evaluate</span><span
class="p">(</span> <span class="n">Action</span><span class="p">,</span> <span
class="n">GraphIRI</span><span class="p">,</span> <span
class="o"><</span><span class="n">SecNode</span><span
class="p">.</span><span class="n">ANY</span><span class="p">,</span> <span
class="n">SecNode</span><span class="p">.</span><span class="n">ANY</span><span
class="p">,</span> <span class="n">SecNode</span><span class="p">.</span><span
class="n">ANY</span> <span class="p">)</span>
+<div class="codehilite"><pre><span class="n">evaluate</span><span
class="p">(</span> <span class="n">Action</span><span class="p">,</span> <span
class="n">GraphIRI</span><span class="p">,</span> <span
class="o"><</span><span class="n">SecNode</span><span
class="p">.</span><span class="n">ANY</span><span class="p">,</span> <span
class="n">SecNode</span><span class="p">.</span><span class="n">ANY</span><span
class="p">,</span> <span class="n">SecNode</span><span class="p">.</span><span
class="n">ANY</span><span class="o">></span> <span class="p">)</span>
</pre></div>
@@ -223,18 +223,18 @@ the range of nodes involved in the actio
nodes.</p>
<ul>
<li>
-<p><SecNode.ANY, SecNode.ANY, SecNode.ANY) - Asks if the user may perform
the action on any triple. </p>
+<p><code><SecNode.ANY, SecNode.ANY, SecNode.ANY></code> - Asks if the
user may perform the action on any triple. </p>
</li>
<li>
-<p><X, SecNode.ANY, SecNode.ANY> - Asks if the user may perform the action
against
+<p><code><X, SecNode.ANY, SecNode.ANY></code> - Asks if the user may
perform the action against
any triple where X is the subject.</p>
</li>
<li>
-<p><SecNode.ANY, X, SecNode.ANY) - Asks if the user may perform the action
against
+<p><code><SecNode.ANY, X, SecNode.ANY></code> - Asks if the user may
perform the action against
any triple where X is the predicate.</p>
</li>
<li>
-<p><(SecNode.ANY, SecNode.ANY, SecNode.X> - Asks if if the user may
perform the action against
+<p><code><SecNode.ANY, SecNode.ANY, SecNode.X></code> - Asks if if the
user may perform the action against
any triple where X is the object.</p>
</li>
</ul>
@@ -242,20 +242,20 @@ any triple where X is the object.</p>
<code>SecNode.FUTURE</code> nodes.</p>
<h4 id="secnodevariable">SecNode.VARIABLE</h4>
<p>This differs from <code>SecNode.ANY</code> in that the system is asking "if
there are any prohibitions" not "if the user
-may perform". Thus queries with the <code>SecNode.VARIABLE</code> nodes should
return <code>true</code> where <code>SecNode.ANY</code>> returns
+may perform". Thus queries with the <code>SecNode.VARIABLE</code> nodes should
return <code>true</code> where <code>SecNode.ANY</code> returns
<code>false</code>. In general this type is used in the query to determine if
triple level filtering of results must be
performed.</p>
<ul>
<li>
-<p><SecNode.VARIABLE, X, Y> - Asks if there are any prohibitions against the
user seeing all subjects
+<p><code><SecNode.VARIABLE, X, Y></code> - Asks if there are any
prohibitions against the user seeing all subjects
that have property X and object Y.</p>
</li>
<li>
-<p><X, SecNode.VARIABLE, Y> - Asks if there are any prohibitions against the
user seeing all predicates
+<p><code><X, SecNode.VARIABLE, Y></code> - Asks if there are any
prohibitions against the user seeing all predicates
hat have subject X and object Y.</p>
</li>
<li>
-<p><X, Y, SecNode.VARIABLE> - Asks if there are any prohibitions against the
user seeing all objects
+<p><code><X, Y, SecNode.VARIABLE></code> - Asks if there are any
prohibitions against the user seeing all objects
that have subject X and predicate Y.</p>
</li>
</ul>
@@ -267,15 +267,15 @@ node should return <code>true</code> whe
determine if triple level filtering of results must be performed.</p>
<ul>
<li>
-<p><SecNode.VARIABLE, X, Y> - Asks if there are any prohibitions against the
user seeing all subjects
+<p><code>SecNode.VARIABLE, X, Y></code> - Asks if there are any
prohibitions against the user seeing all subjects
that have property X and object Y.</p>
</li>
<li>
-<p><X, SecNode.VARIABLE, Y> - Asks if there are any prohibitions against the
user seeing all predicates
+<p><code><X, SecNode.VARIABLE, Y></code> - Asks if there are any
prohibitions against the user seeing all predicates
that have subject X and object Y.</p>
</li>
<li>
-<p><X, Y, SecNode.VARIABLE> - Asks if there are any prohibitions against the
user seeing all objects
+<p><code><X, Y, SecNode.VARIABLE></code> - Asks if there are any
prohibitions against the user seeing all objects
that have subject X and predicate Y.</p>
</li>
</ul>
@@ -284,14 +284,14 @@ that have subject X and predicate Y.</p>
inserted. For example when concatenating one RDFList with another
(<code>rdfList.concatenate( rdfList2 )</code>) the system
will create a series of anonymous nodes. To check for these the
<code>SecNode.FUTURE</code> is used. Initially the system will
call </p>
-<div class="codehilite"><pre><span class="n">evaluate</span><span
class="p">(</span> <span class="n">Action</span><span class="p">.</span><span
class="n">CREATE</span><span class="p">,</span> <span class="n">X</span><span
class="p">,</span> <span class="o"><</span><span
class="n">SecNode</span><span class="p">.</span><span
class="n">FUTURE</span><span class="p">,</span> <span class="n">RDF</span><span
class="p">.</span><span class="n">first</span><span class="p">,</span> <span
class="n">SecNode</span><span class="p">.</span><span class="n">ANY</span>
<span class="p">)</span>
+<div class="codehilite"><pre><span class="n">evaluate</span><span
class="p">(</span> <span class="n">Action</span><span class="p">.</span><span
class="n">CREATE</span><span class="p">,</span> <span class="n">X</span><span
class="p">,</span> <span class="o"><</span><span
class="n">SecNode</span><span class="p">.</span><span
class="n">FUTURE</span><span class="p">,</span> <span class="n">RDF</span><span
class="p">.</span><span class="n">first</span><span class="p">,</span> <span
class="n">SecNode</span><span class="p">.</span><span class="n">ANY</span><span
class="o">></span> <span class="p">)</span>
</pre></div>
<p>to ascertain if the user can create a triple in graph X that has an
anonymous node (SecNode.FUTURE) as the subject,
RDF.first as the predicate and any node as the object. If this is not allowed
then for every node in <code>rdfList2</code>
the system will call</p>
-<div class="codehilite"><pre><span class="n">evaluate</span><span
class="p">(</span> <span class="n">Action</span><span class="p">.</span><span
class="n">CREATE</span><span class="p">,</span> <span class="n">X</span><span
class="p">,</span> <span class="o"><</span><span
class="n">SecNode</span><span class="p">.</span><span
class="n">FUTURE</span><span class="p">,</span> <span class="n">RDF</span><span
class="p">.</span><span class="n">first</span><span class="p">,</span> <span
class="n">node</span> <span class="p">)</span>
+<div class="codehilite"><pre><span class="n">evaluate</span><span
class="p">(</span> <span class="n">Action</span><span class="p">.</span><span
class="n">CREATE</span><span class="p">,</span> <span class="n">X</span><span
class="p">,</span> <span class="o"><</span><span
class="n">SecNode</span><span class="p">.</span><span
class="n">FUTURE</span><span class="p">,</span> <span class="n">RDF</span><span
class="p">.</span><span class="n">first</span><span class="p">,</span> <span
class="n">node</span><span class="o">></span> <span class="p">)</span>
</pre></div>
