Today there is no way to do it. The existing constraint mechanism here is for role activation only - not permission checks. It is worth discussing adding something like this. It would no be difficult. It would require you to implement a callback interface. Would something like that work?
Shawn > On Aug 24, 2015, at 9:59 AM, Chris Pike <[email protected]> wrote: > > Shawn, > > Thanks for the quick response. I was able to implement the time validator > interface but the validator compares a provided time against the constraint. > I need to compare my arbitrary input against the constraint. I should be able > to store the constraint info and look it up inside the validator, but how can > I pass my arbitrary input to check access? > > ~Chris Pike > > ----- Original Message ----- > From: "Shawn McKinney" <[email protected]> > To: [email protected] > Sent: Monday, August 24, 2015 11:17:18 AM > Subject: Re: [Bulk] RBAC Constraints > >> On Aug 24, 2015, at 8:14 AM, Shawn McKinney <[email protected]> wrote: >> >> >> 1. Implement the org.apache.directory.fortress.core.util.timeValidator >> interface. The existing temporal evaluators all reside inside the same >> package. You may use one of those as an example. > > correction: > > Implement the org.apache.directory.fortress.core.util.time.Validator > interface. > > Shawn
