com.ibm.itim.policy.join
Class JoinDirector
java.lang.Object
|
+--com.ibm.itim.policy.join.JoinDirector
All Implemented Interfaces: com.ibm.itim.fesiextensions.EnroleRuntimeContext, com.ibm.itim.fesiextensions.PolicyJoinRuntimeContext
public class JoinDirector extends java.lang.Objectimplements com.ibm.itim.fesiextensions.PolicyJoinRuntimeContext
An implementation of PolicyJoinRuntimeContext.
This class is responsible for:
Sorting of policies by priority.
Mediating the order of evaluating and generating of provisioning parameters.
dispatching the entitlement join task to the appropriate concrete join class.
Implementing a join interface depending on the attribute's join type.
Associating attributes with all entitlements which describe them.
Finding the joined entitlement's type and process definition.
Fields inherited from interface com.ibm.itim.fesiextensions.PolicyJoinRuntimeContext
FESI_CONTEXT_ITEM_PARAMS, FESI_CONTEXT_ITEM_REASON, FESI_CONTEXT_ITEM_SERVICE, FESI_CONTEXT_ITEM_SUBJECT, FESI_EXTENSION_PREFIX_PROVISIONING_POLICY, REASON_EXISTING_ACCOUNT_EVALUATION, REASON_NEW_ACCOUNT_EVALUATION
Fields inherited from interface com.ibm.itim.fesiextensions.EnroleRuntimeContext
FESI_CONTEXT_ITEM_ATTRIBUTES
Constructor Summary
JoinDirector (java.util.Collection policyEntitlementPairs,
ServiceEntity service,
PersonEntity person)
Constructs JoinDirector with Collection, ServiceEntity, and PersonEntity values.
JoinDirector (java.util.Collection policyEntitlementPairs,
ServiceEntity service,
PersonEntity person,
java.util.Map accountAttributes)
Constructs JoinDirector with Collection, ServiceEntity, PersonEntity, and Map values.
Method Summary
com.ibm.itim.dataservices.model.policy.Entitlement
combineEntitlements ()
Method will combine entitlements contained
in the EntitlementInProvisioningPolicy objects into a joined entitlement.
Methods inherited from class java.lang.Object
equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
JoinDirector
public JoinDirector (java.util.Collection policyEntitlementPairs,
ServiceEntity service,
PersonEntity person)
Constructs JoinDirector with Collection, ServiceEntity, and PersonEntity values.
Parameters: policyEntitlementPairs
- contains all relevant policy-entitlement associationsservice
- Service for which the attributes values will be createdperson
- Person to which the account belongs
JoinDirector
public JoinDirector (java.util.Collection policyEntitlementPairs,
ServiceEntity service,
PersonEntity person,
java.util.Map accountAttributes)
Constructs JoinDirector with Collection, ServiceEntity, PersonEntity, and Map values.
Parameters: policyEntitlementPairs
- contains all relevant policy-entitlement associationsservice
- Service for which the attributes values will be createdperson
- Person to which the account belongsaccountAttributes
- Map of account attributes where values are AttributeValue objects.
combineEntitlements
public com.ibm.itim.dataservices.model.policy.Entitlement combineEntitlements ()
throws ModelCommunicationException ,
com.ibm.itim.dataservices.schema.SchemaEntryNotFoundException,
com.ibm.itim.dataservices.schema.SchemaException,
com.ibm.itim.policy.PolicyAuthorityException,
IterationsExceededException ,
com.ibm.itim.policy.ParameterEvaluationException,
com.ibm.itim.script.ScriptEvaluatorException
Method will combine entitlements contained
in the EntitlementInProvisioningPolicy objects into a joined entitlement.
Returns: pseudo Entitlement object with all provisioning parameters joined.
Throws:
com.ibm.itim.policy.PolicyAuthorityException
- thrown when unrecoverable error encountered during
policy based generation of a provisioning parameter.
com.ibm.itim.dataservices.schema.SchemaEntryNotFoundException
- thrown when schema entry for an attribute cannot be
found while retrieving join directive for that attribute.
ModelCommunicationException
- when something goes wrong while trying to use JoinDirective instance.
com.ibm.itim.dataservices.schema.SchemaException
- - When LDAP schema inormation cannot be retrieved.
IterationsExceededException
- when resulting entitlement is required and password couldn't be generated
due to password rules being too strict.
NOTE: Passwords are not generated unless joined entitlement is required.
com.ibm.itim.policy.ParameterEvaluationException
- - When an unexpected exception occured during provisioning parameter evaluation.
com.ibm.itim.script.ScriptEvaluatorException
- thrown when script for a provisioning parameter cannot be evaluated.
IBM Tivoli Identity Manager 4.6
© Copyright International Business Machines Corporation 2005. All rights
reserved. US Government Users Restricted Rights
Use, duplication or disclosure restricted by GSA ADP Schedule
Contract with IBM Corp.