Package ubic.gemma.core.security.authorization.acl

@NonNullApi package ubic.gemma.core.security.authorization.acl

Class	Description
AclAdvice	Gemma-specific extension points for BaseAclAdvice: identifies User / UserGroup, supplies their granted authority, marks the entity types that should keep private ACLs on admin-driven creation, and runs the DEA → ExpressionAnalysisResultSet parent-ACL special case.
AclClassMetadata	Provide ACL-related metadata.
AclEntryAfterInvocationByAssociationCollectionFilteringProvider	Subclass this when filtering a collection based not on the security of the element itself but on the security of an associated parent domain object.
AclEntryAfterInvocationByAssociationFilteringProvider	Single-object after-invocation provider that evaluates ACLs on an associated (parent) domain object rather than on the returned object itself.
AclEntryAfterInvocationCollectionFilteringProvider	Overrides the functionality of the spring-provided AclEntryAfterInvocationCollectionFilteringProvider to be more efficient with large collections by using AclService.readAclsById(List, List) to bulk-fetch ACLs for every element of the returned collection in a single query.
AclEntryAfterInvocationCompositeSequenceByArrayDesignFilteringProvider	Filter CompositeSequence based on the permissions of the associated ArrayDesign.
AclEntryAfterInvocationCompositeSequenceCollectionByArrayDesignFilteringProvider	Filter collections of CompositeSequence based on the permissions of the associated ArrayDesign(s).
AclEntryAfterInvocationDataVectorCollectionByExpressionExperimentFilteringProvider	Filter collections of DataVector and DataVectorValueObjects based on the permissions of the associated ExpressionExperiment(s).
AclEntryAfterInvocationDifferentialExpressionAnalysisResultCollectionByResultSetFilteringProvider	Filter collections of DifferentialExpressionAnalysisResult by the ExpressionAnalysisResultSet they belong to.
AclEntryAfterInvocationOwnedCollectionFilteringProvider	Filter a collection of Securable so that only the entries the current user owns (or is an admin on) and can edit remain.
AclEntryAfterInvocationPrivateCollectionFilteringProvider	Filter a collection of Securable to keep only entries that are not public AND that the current user can read (this includes data sets that are read-only-shared by another user).
AclEntryAfterInvocationQuietReadProvider	After-invocation provider for the AFTER_ACL_READ_QUIET config attribute: same ACL check as the stock AclEntryAfterInvocationProvider (READ or ADMINISTRATION on the returned single domain object), but denial is converted to a null return value rather than propagated.
AclEntryAfterInvocationStreamFilteringProvider	After-invocation provider that filters a Stream of domain objects, retaining only those for which the authenticated user holds one of the requirePermission grants.
AclEntryAfterInvocationValueObjectCollectionReadProvider	Gemma-owned after-invocation provider for the AFTER_ACL_VALUE_OBJECT_COLLECTION_READ config attribute: bulk ACL check + per-row SecureValueObject security-metadata population over a returned collection.
AclEntryAfterInvocationValueObjectMapReadProvider	Gemma-owned after-invocation provider for the AFTER_ACL_VALUE_OBJECT_MAP_READ config attribute: bulk ACL check + per-key SecureValueObject security-metadata population over a returned Map whose keys are SecureValueObjects.
AclEntryAfterInvocationValueObjectReadProvider	Gemma-owned after-invocation provider for the AFTER_ACL_VALUE_OBJECT_READ config attribute: single-object ACL check on a SecureValueObject return value.
AclLinterConfig	Configuration for the ACL linter.
AclLinterConfig.AclLinterConfigBuilder
AclLinterHelperService	Transaction boundary for the ACL linter's parent-linking repair.
AclLinterHelperServiceImpl
AclLinterService	Lint and possibly fix ACL issues.
AclLinterService.LintResult
AclLinterServiceImpl
AclVoterAuthorizationManager	Spring Security 6 AuthorizationManager adapter that delegates to a legacy AccessDecisionVoter bound to a single ConfigAttribute string.
AclVoterAuthorizationManagerConfig	Wires AclVoterAuthorizationManager beans, one per active ACL_SECURABLE_* config attribute, on top of the existing gsec voter beans.
ParentIdentityRetrievalStrategy	Strategy for locating parent ACL identities.
ParentIdentityRetrievalStrategyImpl	Use domain-specific logic to resolve parent ACL identities.