org.keycloak.storage.ldap.mappers.membership.group

Class GroupLDAPStorageMapper.LDAPGroupMappingsUserDelegate

java.lang.Object

org.keycloak.models.utils.UserModelDelegate

org.keycloak.storage.ldap.mappers.membership.group.GroupLDAPStorageMapper.LDAPGroupMappingsUserDelegate

All Implemented Interfaces:

RoleMapperModel, UserModel

Enclosing class:

GroupLDAPStorageMapper

public class GroupLDAPStorageMapper.LDAPGroupMappingsUserDelegate
extends UserModelDelegate

Nested Class Summary

Nested classes/interfaces inherited from interface org.keycloak.models.UserModel

UserModel.RequiredAction, UserModel.UserRemovedEvent

Field Summary

Fields inherited from class org.keycloak.models.utils.UserModelDelegate

delegate

Fields inherited from interface org.keycloak.models.UserModel

EMAIL, FIRST_NAME, GROUPS, INCLUDE_SERVICE_ACCOUNT, LAST_NAME, LOCALE, SEARCH, USERNAME

Constructor Summary

Constructors

Constructor and Description
LDAPGroupMappingsUserDelegate(RealmModel realm, UserModel user, LDAPObject ldapUser)

Method Summary

Modifier and Type	Method and Description
Set<GroupModel>	getGroups()
protected Set<GroupModel>	getLDAPGroupMappingsConverted()
boolean	hasRole(RoleModel role) Returns true if this object is directly or indirectly assigned the given role, false otherwise.
boolean	isMemberOf(GroupModel group)
void	joinGroup(GroupModel group)
void	leaveGroup(GroupModel group)

Methods inherited from class org.keycloak.models.utils.UserModelDelegate

addRequiredAction, addRequiredAction, deleteRoleMapping, equals, getAttribute, getAttributes, getClientRoleMappings, getCreatedTimestamp, getDelegate, getEmail, getFederationLink, getFirstAttribute, getFirstName, getId, getLastName, getRealmRoleMappings, getRequiredActions, getRoleMappings, getServiceAccountClientLink, getUsername, grantRole, hashCode, isEmailVerified, isEnabled, removeAttribute, removeRequiredAction, removeRequiredAction, setAttribute, setCreatedTimestamp, setEmail, setEmailVerified, setEnabled, setFederationLink, setFirstName, setLastName, setServiceAccountClientLink, setSingleAttribute, setUsername

Methods inherited from class java.lang.Object

clone, finalize, getClass, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.keycloak.models.UserModel

getGroups, getGroups, getGroupsCount, getGroupsCountByNameContaining

Constructor Detail

LDAPGroupMappingsUserDelegate

public LDAPGroupMappingsUserDelegate(RealmModel realm,
                                     UserModel user,
                                     LDAPObject ldapUser)

Method Detail

hasRole

public boolean hasRole(RoleModel role)

Description copied from interface: RoleMapperModel

Returns true if this object is directly or indirectly assigned the given role, false otherwise.

For example, true is returned for hasRole(R) if:

• R is directly assigned to this object
• R is not assigned to this object but this object belongs to a group G which is assigned the role R
• R is not assigned to this object but this object belongs to a group G, and G belongs to group H which is assigned the role R

Specified by:

hasRole in interface RoleMapperModel

Overrides:

hasRole in class UserModelDelegate

Returns:

see description

getGroups

public Set<GroupModel> getGroups()

Specified by:

getGroups in interface UserModel

Overrides:

getGroups in class UserModelDelegate

joinGroup

public void joinGroup(GroupModel group)

Specified by:

joinGroup in interface UserModel

Overrides:

joinGroup in class UserModelDelegate

leaveGroup

public void leaveGroup(GroupModel group)

Specified by:

leaveGroup in interface UserModel

Overrides:

leaveGroup in class UserModelDelegate

isMemberOf

public boolean isMemberOf(GroupModel group)

Specified by:

isMemberOf in interface UserModel

Overrides:

isMemberOf in class UserModelDelegate

getLDAPGroupMappingsConverted

protected Set<GroupModel> getLDAPGroupMappingsConverted()