How to use

ApplicationTypeAccessConstraintDefinition

in

org.jboss.as.controller.access.management

private DataSourceDefinition() {
  // TODO The cast to PersistentResourceDefinition.Parameters is a workaround to WFCORE-4040
  super((Parameters) new Parameters(pathElement("datasource"), getResolver("datasource"))
      .setAddHandler(DataSourceOperations.ADD_OPERATION)
      .setRemoveHandler(DataSourceOperations.REMOVE_OPERATION)
      .setAccessConstraints(new ApplicationTypeAccessConstraintDefinition(
          new ApplicationTypeConfig(AgroalExtension.SUBSYSTEM_NAME, "datasource"))));
}

private XaDataSourceDefinition(final boolean registerRuntimeOnly, final boolean deployed) {
  super(PATH_XA_DATASOURCE,
      DataSourcesExtension.getResourceDescriptionResolver(XA_DATASOURCE),
      deployed ? null : XaDataSourceAdd.INSTANCE,
      deployed ? null : DataSourceRemove.XA_INSTANCE);
  this.registerRuntimeOnly = registerRuntimeOnly;
  this.deployed = deployed;
  ApplicationTypeConfig atc = new ApplicationTypeConfig(DataSourcesExtension.SUBSYSTEM_NAME, XA_DATASOURCE);
  accessConstraints = new ApplicationTypeAccessConstraintDefinition(atc).wrapAsList();
}

private boolean isApplicationType(TargetResource target) {
  for (AccessConstraintDefinition constraintDefinition : target.getAccessConstraints()) {
    if (constraintDefinition instanceof ApplicationTypeAccessConstraintDefinition) {
      ApplicationTypeAccessConstraintDefinition atcd = (ApplicationTypeAccessConstraintDefinition) constraintDefinition;
      ApplicationTypeConfig atc = atcd.getApplicationTypeConfig();
      if (atc.isApplicationType()) {
        return true;
      }
    }
  }
  return false;
}

private AccessConstraintUtilizationImpl getAccessConstraintUtilizationImpl(AccessConstraintKey key,
                                      PathAddress address) {
  Map<PathAddress, AccessConstraintUtilization> map = getAccessConstraintUtilizations(key, true);
  AccessConstraintUtilizationImpl acu = (AccessConstraintUtilizationImpl) map.get(address);
  if (acu == null) {
    // WFLY-1819. Validate that ApplicationTypeConfig.DEPLOYMENT isn't misused
    // A bit hacky, but this is as good a control point for this as any.
    if (key.isCore() && ApplicationTypeAccessConstraintDefinition.DEPLOYMENT.getName().equals(key.getName())
        && ApplicationTypeAccessConstraintDefinition.DEPLOYMENT.getType().equals(key.getType())) {
      assert !address.toString().contains(ModelDescriptionConstants.SUBSYSTEM)
          : "Invalid use of " + key + " in a subsystem; reserved for core use";
    }
    acu = new AccessConstraintUtilizationImpl(key, address);
    map.put(address, acu);
  }
  return acu;
}

private boolean isApplicationType(TargetAttribute target) {
  for (AccessConstraintDefinition constraintDefinition : target.getAccessConstraints()) {
    if (constraintDefinition instanceof ApplicationTypeAccessConstraintDefinition) {
      ApplicationTypeAccessConstraintDefinition atcd = (ApplicationTypeAccessConstraintDefinition) constraintDefinition;
      ApplicationTypeConfig atc = atcd.getApplicationTypeConfig();
      if (atc.isApplicationType()) {
        return true;
      }
    }
  }
  return false;
}

private AccessConstraintUtilizationImpl getAccessConstraintUtilizationImpl(AccessConstraintKey key,
                                      PathAddress address) {
  Map<PathAddress, AccessConstraintUtilization> map = getAccessConstraintUtilizations(key, true);
  AccessConstraintUtilizationImpl acu = (AccessConstraintUtilizationImpl) map.get(address);
  if (acu == null) {
    // WFLY-1819. Validate that ApplicationTypeConfig.DEPLOYMENT isn't misused
    // A bit hacky, but this is as good a control point for this as any.
    if (key.isCore() && ApplicationTypeAccessConstraintDefinition.DEPLOYMENT.getName().equals(key.getName())
        && ApplicationTypeAccessConstraintDefinition.DEPLOYMENT.getType().equals(key.getType())) {
      assert !address.toString().contains(ModelDescriptionConstants.SUBSYSTEM)
          : "Invalid use of " + key + " in a subsystem; reserved for core use";
    }
    acu = new AccessConstraintUtilizationImpl(key, address);
    map.put(address, acu);
  }
  return acu;
}

private XADataSourceDefinition() {
  // TODO The cast to PersistentResourceDefinition.Parameters is a workaround to WFCORE-4040
  super((Parameters) new Parameters(pathElement("xa-datasource"), getResolver("xa-datasource"))
      .setAddHandler(XADataSourceOperations.ADD_OPERATION)
      .setRemoveHandler(XADataSourceOperations.REMOVE_OPERATION)
      .setAccessConstraints(new ApplicationTypeAccessConstraintDefinition(
          new ApplicationTypeConfig(AgroalExtension.SUBSYSTEM_NAME, "xa-datasource"))));
}

private JdbcDriverDefinition() {
  super(PATH_DRIVER,
      DataSourcesExtension.getResourceDescriptionResolver(JDBC_DRIVER_NAME),
      JdbcDriverAdd.INSTANCE,
      JdbcDriverRemove.INSTANCE);
  ApplicationTypeConfig atc = new ApplicationTypeConfig(DataSourcesExtension.SUBSYSTEM_NAME, JDBC_DRIVER_NAME);
  accessConstraints = new ApplicationTypeAccessConstraintDefinition(atc).wrapAsList();
}

private boolean isApplicationType(TargetAttribute target) {
  for (AccessConstraintDefinition constraintDefinition : target.getAccessConstraints()) {
    if (constraintDefinition instanceof ApplicationTypeAccessConstraintDefinition) {
      ApplicationTypeAccessConstraintDefinition atcd = (ApplicationTypeAccessConstraintDefinition) constraintDefinition;
      ApplicationTypeConfig atc = atcd.getApplicationTypeConfig();
      if (atc.isApplicationType()) {
        return true;
      }
    }
  }
  return false;
}

private AccessConstraintUtilizationImpl getAccessConstraintUtilizationImpl(AccessConstraintKey key,
                                      PathAddress address) {
  Map<PathAddress, AccessConstraintUtilization> map = getAccessConstraintUtilizations(key, true);
  AccessConstraintUtilizationImpl acu = (AccessConstraintUtilizationImpl) map.get(address);
  if (acu == null) {
    // WFLY-1819. Validate that ApplicationTypeConfig.DEPLOYMENT isn't misused
    // A bit hacky, but this is as good a control point for this as any.
    if (key.isCore() && ApplicationTypeAccessConstraintDefinition.DEPLOYMENT.getName().equals(key.getName())
        && ApplicationTypeAccessConstraintDefinition.DEPLOYMENT.getType().equals(key.getType())) {
      assert !address.toString().contains(ModelDescriptionConstants.SUBSYSTEM)
          : "Invalid use of " + key + " in a subsystem; reserved for core use";
    }
    acu = new AccessConstraintUtilizationImpl(key, address);
    map.put(address, acu);
  }
  return acu;
}

private DriverDefinition() {
  // TODO The cast to PersistentResourceDefinition.Parameters is a workaround to WFCORE-4040
  super((Parameters) new Parameters(pathElement("driver"), getResolver("driver"))
      .setCapabilities(AGROAL_DRIVER_CAPABILITY)
      .setAddHandler(DriverOperations.ADD_OPERATION)
      .setRemoveHandler(DriverOperations.REMOVE_OPERATION)
      .setAccessConstraints(new ApplicationTypeAccessConstraintDefinition(
          new ApplicationTypeConfig(AgroalExtension.SUBSYSTEM_NAME, "driver"))));
}

public ResourceAdapterResourceDefinition(boolean readOnly, boolean runtimeOnlyRegistrationValid) {
  super(PathElement.pathElement(RESOURCEADAPTER_NAME), RESOLVER, readOnly ? null : RaAdd.INSTANCE, readOnly ? null : RaRemove.INSTANCE);
  this.readOnly = readOnly;
  this.runtimeOnlyRegistrationValid = runtimeOnlyRegistrationValid;
  ApplicationTypeConfig atc = new ApplicationTypeConfig(ResourceAdaptersExtension.SUBSYSTEM_NAME, RESOURCEADAPTER_NAME);
  accessConstraints = new ApplicationTypeAccessConstraintDefinition(atc).wrapAsList();
}

private boolean isApplicationType(Action action) {
  for (AccessConstraintDefinition constraintDefinition : action.getAccessConstraints()) {
    if (constraintDefinition instanceof ApplicationTypeAccessConstraintDefinition) {
      ApplicationTypeAccessConstraintDefinition atcd = (ApplicationTypeAccessConstraintDefinition) constraintDefinition;
      ApplicationTypeConfig atc = atcd.getApplicationTypeConfig();
      if (atc.isApplicationType()) {
        return true;
      }
    }
  }
  return false;
}

private ApplicationSecurityDomainDefinition() {
  this((Parameters) new Parameters(UndertowExtension.PATH_APPLICATION_SECURITY_DOMAIN,
      UndertowExtension.getResolver(Constants.APPLICATION_SECURITY_DOMAIN))
          .setCapabilities(APPLICATION_SECURITY_DOMAIN_RUNTIME_CAPABILITY)
          .addAccessConstraints(new SensitiveTargetAccessConstraintDefinition(new SensitivityClassification(UndertowExtension.SUBSYSTEM_NAME, Constants.APPLICATION_SECURITY_DOMAIN, false, false, false)),
              new ApplicationTypeAccessConstraintDefinition(new ApplicationTypeConfig(UndertowExtension.SUBSYSTEM_NAME, Constants.APPLICATION_SECURITY_DOMAIN)))
          , new AddHandler());
}

private DataSourceDefinition(final boolean registerRuntimeOnly, final boolean deployed) {
  super(PATH_DATASOURCE,
      DataSourcesExtension.getResourceDescriptionResolver(DATA_SOURCE),
      deployed ? null : DataSourceAdd.INSTANCE,
      deployed ? null : DataSourceRemove.INSTANCE);
  this.registerRuntimeOnly = registerRuntimeOnly;
  this.deployed = deployed;
  ApplicationTypeConfig atc = new ApplicationTypeConfig(DataSourcesExtension.SUBSYSTEM_NAME, DATA_SOURCE);
  accessConstraints = new ApplicationTypeAccessConstraintDefinition(atc).wrapAsList();
}

private boolean isApplicationType(Action action) {
  for (AccessConstraintDefinition constraintDefinition : action.getAccessConstraints()) {
    if (constraintDefinition instanceof ApplicationTypeAccessConstraintDefinition) {
      ApplicationTypeAccessConstraintDefinition atcd = (ApplicationTypeAccessConstraintDefinition) constraintDefinition;
      ApplicationTypeConfig atc = atcd.getApplicationTypeConfig();
      if (atc.isApplicationType()) {
        return true;
      }
    }
  }
  return false;
}

SecurityDomainResourceDefinition(boolean registerRuntimeOnly) {
  super(new Parameters(SecurityExtension.SECURITY_DOMAIN_PATH,
      SecurityExtension.getResourceDescriptionResolver(Constants.SECURITY_DOMAIN))
      .setAddHandler(SecurityDomainAdd.INSTANCE)
      .setRemoveHandler(new ServiceRemoveStepHandler(SecurityDomainService.SERVICE_NAME, SecurityDomainAdd.INSTANCE) {
        @Override
        protected void performRuntime(OperationContext context, ModelNode operation, ModelNode model) {
          super.performRuntime(context, operation, model);
          if (context.isResourceServiceRestartAllowed()) {
            String cacheType = SecurityDomainAdd.getAuthenticationCacheType(model);
            String securityDomain = context.getCurrentAddressValue();
            if (SecurityDomainResourceDefinition.INFINISPAN_CACHE_TYPE.equals(cacheType)) {
              for (org.wildfly.clustering.infinispan.spi.InfinispanCacheRequirement requirement : EnumSet.allOf(org.wildfly.clustering.infinispan.spi.InfinispanCacheRequirement.class)) {
                context.removeService(requirement.getServiceName(context, CACHE_CONTAINER_NAME, securityDomain));
              }
            }
          }
        }
      })
      .setCapabilities(LEGACY_SECURITY_DOMAIN));
  this.registerRuntimeOnly = registerRuntimeOnly;
  ApplicationTypeConfig atc = new ApplicationTypeConfig(SecurityExtension.SUBSYSTEM_NAME, Constants.SECURITY_DOMAIN);
  AccessConstraintDefinition acd = new ApplicationTypeAccessConstraintDefinition(atc);
  this.accessConstraints = Arrays.asList(SensitiveTargetAccessConstraintDefinition.SECURITY_DOMAIN, acd);
  setDeprecated(SecurityExtension.DEPRECATED_SINCE);
}

private MailSessionDefinition() {
  super(new Parameters(MailExtension.MAIL_SESSION_PATH,
      MailExtension.getResourceDescriptionResolver(MailSubsystemModel.MAIL_SESSION))
      .setAddHandler(MailSessionAdd.INSTANCE)
      .setRemoveHandler(new ServiceRemoveStepHandler(MailSessionDefinition.SESSION_CAPABILITY.getCapabilityServiceName(), MailSessionAdd.INSTANCE))
      .setCapabilities(SESSION_CAPABILITY)
  );
  ApplicationTypeConfig atc = new ApplicationTypeConfig(MailExtension.SUBSYSTEM_NAME, MailSubsystemModel.MAIL_SESSION);
  accessConstraints = new ApplicationTypeAccessConstraintDefinition(atc).wrapAsList();
}

private boolean isApplicationType(TargetAttribute target) {
  for (AccessConstraintDefinition constraintDefinition : target.getAccessConstraints()) {
    if (constraintDefinition instanceof ApplicationTypeAccessConstraintDefinition) {
      ApplicationTypeAccessConstraintDefinition atcd = (ApplicationTypeAccessConstraintDefinition) constraintDefinition;
      ApplicationTypeConfig atc = atcd.getApplicationTypeConfig();
      if (atc.isApplicationType()) {
        return true;
      }
    }
  }
  return false;
}

private ApplicationSecurityDomainDefinition() {
  this(new Parameters(PathElement.pathElement(EJB3SubsystemModel.APPLICATION_SECURITY_DOMAIN), EJB3Extension.getResourceDescriptionResolver(EJB3SubsystemModel.APPLICATION_SECURITY_DOMAIN))
      .setCapabilities(APPLICATION_SECURITY_DOMAIN_RUNTIME_CAPABILITY)
      .addAccessConstraints(new SensitiveTargetAccessConstraintDefinition(new SensitivityClassification(EJB3Extension.SUBSYSTEM_NAME, EJB3SubsystemModel.APPLICATION_SECURITY_DOMAIN, false, false, false)),
          new ApplicationTypeAccessConstraintDefinition(new ApplicationTypeConfig(EJB3Extension.SUBSYSTEM_NAME, EJB3SubsystemModel.APPLICATION_SECURITY_DOMAIN)))
      , new AddHandler());
}