How to use

RoleManager

in

org.picketlink.idm.api

roleQuery.roleType != null)
Role role = identitySession.getRoleManager().getRole(roleQuery.roleType, roleQuery.user, roleQuery.group);
if (role != null)
roleQuery.roleType == null)
return identitySession.getRoleManager().findRoles(roleQuery.user, null);
roleQuery.roleType != null)
return identitySession.getRoleManager().findRoles(roleQuery.user, roleQuery.roleType);
roleQuery.roleType == null)
return identitySession.getRoleManager().findRoles(roleQuery.group, null);
roleQuery.roleType != null)
return identitySession.getRoleManager().findRoles(roleQuery.group, roleQuery.roleType);
  findRoleTypes(roleQuery.user, roleQuery.group, roleQuery.searchCriteria);
for (RoleType type : roleTypes)

findGroupsWithRelatedRole(user, q.groupType, q.searchCriteria));

findUsersWithRelatedRole(group, q.searchCriteria));

private void populateMembershipType(MembershipType mt) throws Exception {
  Map<String, String> props;
  try {
    RoleType rt = getIdentitySession().getRoleManager().getRoleType(mt.getName());
    props = getIdentitySession().getRoleManager().getProperties(rt);
  } catch (Exception e) {
    handleException("Identity error occured when populating membership type", e);

  orgService.flush();
  roles.addAll(getIdentitySession().getRoleManager().findRoles(userName, membershipType));
  roles.addAll(getIdentitySession().getRoleManager().findRoles(userName, MembershipTypeHandler.ANY_MEMBERSHIP_TYPE));
} catch (Exception e) {
  handleException("Identity operation error: ", e);

  roles = getIdentitySession().getRoleManager().findRoles(userName, null);
} catch (Exception e) {
  getIdentitySession().getRoleManager().removeRole(role);

  .findUserRoleTypes(u);
for (Role role : identitySession.getRoleManager().findRoles(u, roleType)) {
  identity.addRole(role.getRoleType().getName(),
      role.getGroup().getName(), role.getGroup().getGroupType());

if (getIdentitySession().getRoleManager().getRoleType(mt.getName()) == null) {
  getIdentitySession().getRoleManager().createRoleType(mt.getName());
if (getIdentitySession().getRoleManager().hasRole(user.getUserName(), groupId, mt.getName())) {
  return;
getIdentitySession().getRoleManager().createRole(mt.getName(), user.getUserName(), groupId);

public Collection<MembershipType> findMembershipTypes() throws Exception {
  if (log.isTraceEnabled()) {
    Tools.logMethodIn(log, LogLevel.TRACE, "findMembershipTypes", null);
  }
  Collection<RoleType> rts;
  try {
    rts = getIdentitySession().getRoleManager().findRoleTypes();
  } catch (Exception e) {
    handleException("Exception occured when looking for membership types", e);
    rts = new LinkedList<RoleType>();
  }
  List<MembershipType> mts = new LinkedList<MembershipType>();
  for (RoleType rt : rts) {
    MembershipType mt = new MembershipTypeImpl(rt.getName(), null, null);
    populateMembershipType(mt);
    if (mt.getName().equals("*")) {
      mts.add(0, mt);
    } else {
      mts.add(mt);
    }
  }
  if (log.isTraceEnabled()) {
    Tools.logMethodOut(log, LogLevel.TRACE, "findMembershipTypes", mts);
  }
  return mts;
}

  hasRole = getIdentitySession().getRoleManager().hasRole(m.getUserName(), groupId, m.getMembershipType());
} catch (Exception e) {
    getIdentitySession().getRoleManager().createRole(m.getMembershipType(), m.getUserName(), groupId);
  } catch (Exception e) {

  role = getIdentitySession().getRoleManager().getRole(type, userName, gid);
} catch (Exception e) {

public MembershipType createMembershipType(MembershipType mt, boolean broadcast) throws Exception {
  if (log.isTraceEnabled()) {
    Tools.logMethodIn(log, LogLevel.TRACE, "createMembershipType", new Object[] { "membershipType", mt, "broadcast",
        broadcast });
  }
  Date now = new Date();
  mt.setCreatedDate(now);
  mt.setModifiedDate(now);
  if (broadcast) {
    preSave(mt, true);
  }
  try {
    getIdentitySession().getRoleManager().createRoleType(mt.getName());
  } catch (Exception e) {
    handleException("Error when creating Membership", e);
  }
  if (broadcast) {
    postSave(mt, true);
  }
  updateMembershipType(mt);
  return mt;
}

  orgService.flush();
  allRoles = getIdentitySession().getRoleManager().findRoles(userName, membershipType);
} catch (Exception e) {
  handleException("Identity operation error: ", e);

  roleTypes = getIdentitySession().getRoleManager().findRoleTypes(userName, gid, null);
} catch (Exception e) {

  roles = new LinkedList<Role>(getIDMService().getIdentitySession().getRoleManager().findRoles(group, null, crit));
} else if (user != null) {
  roles = new LinkedList<Role>(getIDMService().getIdentitySession().getRoleManager().findRoles(user, null, crit));

  roles = getIdentitySession().getRoleManager().findRoles(userName, null);
} catch (Exception e) {

  roles = getIdentitySession().getRoleManager().findRoles(gid, null);
} catch (Exception e) {