Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

KIM Permission

Check Description

Location

Supported in KRAD
KR-NS / Full Unmask Field

Checks if a security-masked field can be displayed in the clear

BusinessObjectAuthorizationServiceImpl.canFullyUnmaskField

 
KR-NS / Partial Unmask Field

Checks if a security-masked field can be partially displayed

BusinessObjectAuthorizationServiceImpl.canPartiallyUnmaskField

 
KR-NS / Create / Maintain Record(s)Allows the control of the editing or creation of individual records via permissions. It's sometimes used to control access to specific records based on role qualifiers, though that is not directly supported. (subclasses add the PK values of the obejct being edited)

canCreate
canMaintain
canCreateOrMaintain 

 

KR-NS / Modify Maintenance Document Section

Uses the DD-provided section ID to check this permission.

This permission is keyed by the Business Object and section ID being edited. This must be the "master" business object being edited by the document. (Not a child object also being edited by the document.)

BusinessObjectAuthorizationServiceImpl.considerMaintenanceDocumentAuthorizer

 

KR-NS / View Inquiry or Maintenance Document Section

Uses the DD-provided section ID to check this permission.

This permission is keyed by the Business Object and section ID being edited. This must be the "master" business object being edited by the document. (Not a child object also being edited by the document.)

BusinessObjectAuthorizationServiceImpl.considerInquiryOrMaintenanceDocumentAuthorizer

 

KR-NS / Modify Maintenance Document Field

This permission is keyed by the Business Object and property name being edited. This must be the "master" business object being edited by the document. (Not a child object also being edited by the document.)

BusinessObjectAuthorizationServiceImpl.considerBusinessObjectFieldModifyAuthorization

 

KR-NS / View Inquiry or Maintenance Document Field

This permission is keyed by the Business Object and property name being edited. This must be the "master" business object being edited by the document. (Not a child object also being edited by the document.)

BusinessObjectAuthorizationServiceImpl.considerBusinessObjectFieldViewAuthorization

 

KR-NS / Edit Document

A (usually) automatically determined permission to ensure that the proper users can edit the documents at the right times. When this is false, the document should generally be completely non-editable.

Not Maint Doc specific: Only here to ensure that the interaction between Edit Document and the Modify Field permissions is preserved.

  

KR-NS / Open Document

 DocumentAuthorizerBase.canOpen 

KR-NS / Perform Custom Maintenance Document Function

When a custom button is supposed to be present on a maintenance document, this permission is checked for the id of the button. (property name) If the user does not have the permission, the button is not shown.BusinessObjectAuthorizationServiceImpl.considerCustomButtonFieldAuthorization 
    
    

...

Class

Notes

Finished Analysis

Struts Classes

 

 

org.kuali.rice.kns.web.struts.action.KualiMaintenanceDocumentAction

 

(tick)

org.kuali.rice.kns.web.struts.action.KualiDocumentActionBase  

org.kuali.rice.kns.web.struts.form.KualiMaintenanceForm

 

(tick)

org.kuali.rice.kns.web.struts.form.KualiDocumentFormBase  
org.kuali.rice.kns.web.struts.form.pojo.PojoFormBase (tick)
General Classes  
org.kuali.rice.kns.document.MaintenanceDocumentBaseMostly support for the PersistableAttachment framework. Left in the KNS because its objects use PersistableBusinessObject. Needs to be converted to KRAD/JPA.(tick)
org.kuali.rice.krad.maintenance.MaintenanceDocumentBaseThis is most of the KNS function and is working as-is. 
org.kuali.rice.kns.rules.MaintenanceDocumentRule  
org.kuali.rice.kns.maintenance.rules.MaintenanceDocumentRuleBase  
org.kuali.rice.kns.util.KNSGlobalVariablesSupport for a MessageList component which could add messages to the top of the KNS screens after form submission. (E.g., Document is successfully routed) 

org.kuali.rice.kns.util.FieldUtils

 

 

org.kuali.rice.kns.web.ui.FieldBridge

Converts the field metadata into UI objects used by rowDisplay.tag

 

org.kuali.rice.kns.web.ui.SectionBridge

Converts the section metadata into UI objects used by rowDisplay.tag

 

org.kuali.rice.kns.util.MaintenanceUtils (tick)

JSP/Tag Files

 

 

/rice-web/src/main/webapp/kr/WEB-INF/jsp/KualiMaintenanceDocument.jsp

 

(tick)

/rice-web/src/main/webapp/WEB-INF/tags/kr/page.tag (tick)
/rice-web/src/main/webapp/WEB-INF/tags/kr/documentOverview.tag (tick)

/rice-web/src/main/webapp/WEB-INF/tags/kr/documentControls.tag

 

(tick)

/rice-web/src/main/webapp/WEB-INF/tags/kr/tab.tag

 

(tick)

/rice-web/src/main/webapp/WEB-INF/tags/kr/rowDisplay.tag

Handles the actual display of the data cells in the document.

(tick)

Maintainable

 

 

org.kuali.rice.kns.maintenance.KualiGlobalMaintainableImpl

 

 

org.kuali.rice.kns.maintenance.KualiMaintainableImpl

 

 

org.kuali.rice.krad.maintenance.MaintainableImpl  

Data Dictionary Classes

 

 

org.kuali.rice.kns.service.impl.MaintenanceDocumentDictionaryServiceImpl  

org.kuali.rice.kns.datadictionary.InquiryDefinition

 

 

org.kuali.rice.kns.datadictionary.MaintainableSectionDefinition

 

 

org.kuali.rice.kns.datadictionary.MaintainableSubSectionHeaderDefinition

 

 

org.kuali.rice.kns.datadictionary.MaintainableItemDefinition  
org.kuali.rice.kns.datadictionary.MaintainableFieldDefinition  

org.kuali.rice.kns.datadictionary.MaintainableCollectionDefinition

 

 

org.kuali.rice.kns.datadictionary.validation.MaintenanceDocumentAttributeValueReader  
Presentation Controller and Authorization  
org.kuali.rice.krad.document.DocumentPresentationControllerBase  (tick)

org.kuali.rice.kns.document.authorization.MaintenanceDocumentPresentationControllerBase

  

(tick)

org.kuali.rice.kns.document.authorization.MaintenanceDocumentAuthorizerBase

  

(tick)

org.kuali.rice.kns.document.authorization.MaintenanceDocumentRestrictionsBase

DTO class which contains the results of all presentation controller and authorizer checks on document sections and fields. Used by the KNS UI classes to alter the contents of the document.

 (tick)

org.kuali.rice.kns.document.authorization.InquiryOrMaintenanceDocumentRestrictionsBase  (tick)

org.kuali.rice.kns.bo.authorization.BusinessObjectAuthorizerBase

  

(tick)

org.kuali.rice.kns.service.impl.BusinessObjectAuthorizationServiceImpl  Handles the building of the "restrictions" objects by calling the methods on the document authorizer.(tick)