com.trendmicro.grid.acl.l0
Class KnownRoles

java.lang.Object
  com.trendmicro.grid.acl.l0.KnownRoles

public class KnownRoles
extends Object

Enumerates all known role names.

Version:

1.0

Author:

Juergen_Kellerer, 2011-04-14

Field Summary

static String	ROLE_ACCESS_AUDIT_LOG Controls whether the user audit log can be accessed.
static String	ROLE_ACCESS_BINARY_CONTENT Controls whether a previously processed file can be downloaded.
static String	ROLE_ACCESS_DETAILS Controls the general access to any details (= all data types containing metadata)
static String	ROLE_ACCESS_PROTECTED_SERVICES Controls the general access to the protected services (aka.
static String	ROLE_CREATE_BINARY_CONTENT Controls whether a file can be sent (created) for processing.
static String	ROLE_MANAGE Controls whether management tasks like clearing caches can be executed.
static String	ROLE_PROCESS_CONTENT Controls whether new or existing content can be processed or reprocessed.
static String	ROLE_RUN_CATEGORIZATION_QUERIES Controls whether categorization queries can be executed.
static String	ROLE_RUN_COMPLEX_QUERIES Controls whether complex queries can be executed.
static String	ROLE_RUN_HASH_QUERIES Controls whether, hash based queries can be executed.
static String	ROLE_RUN_PACKAGE_QUERIES Controls whether file packages can be queried.
static String	ROLE_RUN_TAG_MATCHING_QUERIES Controls whether tag matching queries can be executed.

Method Summary

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

ROLE_ACCESS_DETAILS

public static final String ROLE_ACCESS_DETAILS

Controls the general access to any details (= all data types containing metadata)

See Also:

Constant Field Values

ROLE_ACCESS_PROTECTED_SERVICES

public static final String ROLE_ACCESS_PROTECTED_SERVICES

Controls the general access to the protected services (aka. "/internal/")

See Also:

Constant Field Values

ROLE_RUN_HASH_QUERIES

public static final String ROLE_RUN_HASH_QUERIES

Controls whether, hash based queries can be executed.

See Also:

Constant Field Values

ROLE_RUN_TAG_MATCHING_QUERIES

public static final String ROLE_RUN_TAG_MATCHING_QUERIES

Controls whether tag matching queries can be executed.
Notes:

• Methods that match tags by hashes like isFilesTaggedWithAll(..) do not fall under this role as the primary query key is hash not tag in such queries.
• Methods that require this role are in general more expensive to execute than hash based methods. This expensiveness originates in the higher cardinality of tag matching indexes.

See Also:

Constant Field Values

ROLE_RUN_PACKAGE_QUERIES

public static final String ROLE_RUN_PACKAGE_QUERIES

Controls whether file packages can be queried.

See Also:

Constant Field Values

ROLE_RUN_CATEGORIZATION_QUERIES

public static final String ROLE_RUN_CATEGORIZATION_QUERIES

Controls whether categorization queries can be executed.

See Also:

Constant Field Values

ROLE_RUN_COMPLEX_QUERIES

public static final String ROLE_RUN_COMPLEX_QUERIES

Controls whether complex queries can be executed.

Any query that allows retrieving relationships or does not fall under one of the other categories is considered a complex query. From a performance standpoint, complex queries are typically less expensive than tag matching queries except if the relationships are huge and require fetching many pages.

See Also:

Constant Field Values

ROLE_ACCESS_BINARY_CONTENT

public static final String ROLE_ACCESS_BINARY_CONTENT

Controls whether a previously processed file can be downloaded.

See Also:

Constant Field Values

ROLE_CREATE_BINARY_CONTENT

public static final String ROLE_CREATE_BINARY_CONTENT

Controls whether a file can be sent (created) for processing.

See Also:

Constant Field Values

ROLE_PROCESS_CONTENT

public static final String ROLE_PROCESS_CONTENT

Controls whether new or existing content can be processed or reprocessed. Note: Users that were granted this role but not "create.binary.content" can trigger reprocessing on previously stored content but cannot add new content.

See Also:

Constant Field Values

ROLE_MANAGE

public static final String ROLE_MANAGE

Controls whether management tasks like clearing caches can be executed.

Since:

1.2.2

See Also:

Constant Field Values

ROLE_ACCESS_AUDIT_LOG

public static final String ROLE_ACCESS_AUDIT_LOG

Controls whether the user audit log can be accessed.

Since:

1.3

See Also:

Constant Field Values