mirror of
https://github.com/apache/cloudstack.git
synced 2025-10-26 08:42:29 +01:00
114 lines
3.8 KiB
Java
Executable File
114 lines
3.8 KiB
Java
Executable File
// Licensed to the Apache Software Foundation (ASF) under one
|
|
// or more contributor license agreements. See the NOTICE file
|
|
// distributed with this work for additional information
|
|
// regarding copyright ownership. The ASF licenses this file
|
|
// to you under the Apache License, Version 2.0 (the
|
|
// "License"); you may not use this file except in compliance
|
|
// with the License. You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing,
|
|
// software distributed under the License is distributed on an
|
|
// "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
|
// KIND, either express or implied. See the License for the
|
|
// specific language governing permissions and limitations
|
|
// under the License.
|
|
package com.cloud.user;
|
|
|
|
import java.util.Map;
|
|
|
|
import org.apache.cloudstack.acl.ControlledEntity;
|
|
import org.apache.cloudstack.acl.RoleType;
|
|
import org.apache.cloudstack.acl.SecurityChecker.AccessType;
|
|
import org.apache.cloudstack.api.command.admin.user.RegisterCmd;
|
|
|
|
import com.cloud.domain.Domain;
|
|
import com.cloud.domain.PartOf;
|
|
import com.cloud.exception.PermissionDeniedException;
|
|
|
|
public interface AccountService {
|
|
|
|
/**
|
|
* Creates a new user and account, stores the password as is so encrypted passwords are recommended.
|
|
*
|
|
* @param userName
|
|
* TODO
|
|
* @param password
|
|
* TODO
|
|
* @param firstName
|
|
* TODO
|
|
* @param lastName
|
|
* TODO
|
|
* @param email
|
|
* TODO
|
|
* @param timezone
|
|
* TODO
|
|
* @param accountName
|
|
* TODO
|
|
* @param accountType
|
|
* TODO
|
|
* @param domainId
|
|
* TODO
|
|
* @param networkDomain
|
|
* TODO
|
|
*
|
|
* @return the user if created successfully, null otherwise
|
|
*/
|
|
UserAccount createUserAccount(String userName, String password, String firstName, String lastName, String email, String timezone, String accountName,
|
|
short accountType, Long domainId, String networkDomain, Map<String, String> details, String accountUUID, String userUUID);
|
|
|
|
/**
|
|
* Locks a user by userId. A locked user cannot access the API, but will still have running VMs/IP addresses
|
|
* allocated/etc.
|
|
*
|
|
* @param userId
|
|
* @return UserAccount object
|
|
*/
|
|
UserAccount lockUser(long userId);
|
|
|
|
Account getSystemAccount();
|
|
|
|
User getSystemUser();
|
|
|
|
User
|
|
createUser(String userName, String password, String firstName, String lastName, String email, String timeZone, String accountName, Long domainId, String userUUID);
|
|
|
|
boolean isAdmin(short accountType);
|
|
|
|
Account finalizeOwner(Account caller, String accountName, Long domainId, Long projectId);
|
|
|
|
Account getActiveAccountByName(String accountName, Long domainId);
|
|
|
|
Account getActiveAccountById(long accountId);
|
|
|
|
Account getAccount(long accountId);
|
|
|
|
User getActiveUser(long userId);
|
|
|
|
User getUserIncludingRemoved(long userId);
|
|
|
|
boolean isRootAdmin(long accountId);
|
|
|
|
boolean isDomainAdmin(long accountId);
|
|
|
|
boolean isNormalUser(long accountId);
|
|
|
|
User getActiveUserByRegistrationToken(String registrationToken);
|
|
|
|
void markUserRegistered(long userId);
|
|
|
|
public String[] createApiKeyAndSecretKey(RegisterCmd cmd);
|
|
|
|
UserAccount getUserByApiKey(String apiKey);
|
|
|
|
RoleType getRoleType(Account account);
|
|
|
|
void checkAccess(Account account, Domain domain) throws PermissionDeniedException;
|
|
|
|
void checkAccess(Account account, AccessType accessType, boolean sameOwner, ControlledEntity... entities) throws PermissionDeniedException;
|
|
|
|
//TO be implemented, to check accessibility for an entity owned by domain
|
|
void checkAccess(Account account, AccessType accessType, boolean sameOwner, PartOf... entities) throws PermissionDeniedException;
|
|
}
|