Uses of Enum Class
zeroecho.pki.server.OperationSecurityDescriptors.ApprovalCategory

Packages that use OperationSecurityDescriptors.ApprovalCategory

Package	Description
zeroecho.pki.server
zeroecho.pki.server.enrollment

Uses of OperationSecurityDescriptors.ApprovalCategory in zeroecho.pki.server

Subclasses with type arguments of type OperationSecurityDescriptors.ApprovalCategory in zeroecho.pki.server

Modifier and Type	Class	Description
static enum	OperationSecurityDescriptors.ApprovalCategory	Approval treatment for one operation.

Methods in zeroecho.pki.server that return OperationSecurityDescriptors.ApprovalCategory

Modifier and Type	Method	Description
OperationSecurityDescriptors.ApprovalCategory	OperationSecurityDescriptors.Descriptor.approvalCategory()	Returns the value of the approvalCategory record component.
OperationSecurityDescriptors.ApprovalCategory	OperationSecurityDescriptors.approvalPolicyCategory(AdministrativeOperation operation, boolean grantApprovalRequired)	Resolves the configured policy category for an operation's actual approval requirement.
static OperationSecurityDescriptors.ApprovalCategory	OperationSecurityDescriptors.ApprovalCategory.valueOf(String name)	Returns the enum constant of this class with the specified name.
static OperationSecurityDescriptors.ApprovalCategory[]	OperationSecurityDescriptors.ApprovalCategory.values()	Returns an array containing the constants of this enum class, in the order they are declared.

Methods in zeroecho.pki.server that return types with arguments of type OperationSecurityDescriptors.ApprovalCategory

Modifier and Type	Method	Description
Map<OperationSecurityDescriptors.ApprovalCategory, ApprovalService.Policy>	ServerRealmConfiguration.approvalPolicies()	Returns the value of the approvalPolicies record component.

Method parameters in zeroecho.pki.server with type arguments of type OperationSecurityDescriptors.ApprovalCategory

Modifier and Type	Method	Description
static String	ServerRealmConfiguration.extendedApprovalCommitment(Map<OperationSecurityDescriptors.ApprovalCategory, ApprovalService.Policy> approvalPolicies)	Computes the canonical tamper-evidence commitment over every approval policy other than OperationSecurityDescriptors.ApprovalCategory.HIGH_RISK (which the durable record commits separately).

Constructors in zeroecho.pki.server with parameters of type OperationSecurityDescriptors.ApprovalCategory

Modifier	Constructor	Description
	Descriptor(String operationId, OperationSecurityDescriptors.Family family, Permission.Action action, Permission.ResourceType resourceType, boolean mutating, Permission.DataView dataView, OperationSecurityDescriptors.ApprovalCategory approvalCategory, OperationSecurityDescriptors.Eligibility eligibility)	Validates one finite descriptor.
	Descriptor(String operationId, Permission.Action action, Permission.ResourceType resourceType, boolean mutating, Permission.DataView dataView, OperationSecurityDescriptors.ApprovalCategory approvalCategory, OperationSecurityDescriptors.Eligibility eligibility)	Creates an existing PKI-family descriptor for embedded callers.

Constructor parameters in zeroecho.pki.server with type arguments of type OperationSecurityDescriptors.ApprovalCategory

Modifier	Constructor	Description
	ServerControlOperationExecutor(PkiOperationExecutor pkiExecutor, RealmId realmId, AuthorityExposurePolicy exposure, ServerControlStore store, RoleTemplateCatalog roles, AuthorizationEngine authorization, ApprovalService approvals, BreakGlassService breakGlass, DisclosureService disclosure, CredentialPublicationGate credentialPublication, AuditorViews auditorViews, Optional<RepositoryAliasService> repositoryAliases, OperationSecurityDescriptors descriptors, Map<OperationSecurityDescriptors.ApprovalCategory, ApprovalService.Policy> approvalPolicies)	Creates the one control dispatcher over existing durable authorities.
	ServerOperationGateway(RealmId realmId, AuthorityExposurePolicy exposure, ServerControlStore control, RoleTemplateCatalog roles, AuthorizationEngine authorization, ApprovalService approvals, BreakGlassService breakGlass, DisclosureService disclosure, CredentialPublicationGate credentialPublication, AuditorViews auditorViews, Optional<RepositoryAliasService> repositoryAliases, OperationSecurityDescriptors descriptors, PkiOperationExecutor executor, ServerOperationGateway.SigningExecutor signingExecutor, PkiResourceScopeResolver resourceScopes, Map<OperationSecurityDescriptors.ApprovalCategory, ApprovalService.Policy> approvalPolicies, Function<String, IssuanceApprovalRequirement> issuanceApprovalRequirements, Clock clock, AuditSink auditSink, Runnable openCheck)	Creates one gateway whose reconciliation is driven only by periodic polling.
	ServerOperationGateway(RealmId realmId, AuthorityExposurePolicy exposure, ServerControlStore control, RoleTemplateCatalog roles, AuthorizationEngine authorization, ApprovalService approvals, BreakGlassService breakGlass, DisclosureService disclosure, CredentialPublicationGate credentialPublication, AuditorViews auditorViews, Optional<RepositoryAliasService> repositoryAliases, OperationSecurityDescriptors descriptors, PkiOperationExecutor executor, ServerOperationGateway.SigningExecutor signingExecutor, PkiResourceScopeResolver resourceScopes, Map<OperationSecurityDescriptors.ApprovalCategory, ApprovalService.Policy> approvalPolicies, Function<String, IssuanceApprovalRequirement> issuanceApprovalRequirements, Clock clock, AuditSink auditSink, Runnable reconciliationWake, Runnable openCheck)	Creates one gateway bound to one realm and one session executor.
	ServerRealmConfiguration(RealmId realmId, String displayName, CredentialConfirmationProofPolicy confirmationProofPolicy, PkiSessionConfiguration pkiSessionConfiguration, AuthorityExposurePolicy authorityExposure, String authorizationCommitment, String approvalCommitment, String extendedApprovalCommitment, String disclosureCommitment, DisclosureService.Defaults disclosureDefaults, Path controlLogPath, MetadataStoreId controlStoreId, Map<OperationSecurityDescriptors.ApprovalCategory, ApprovalService.Policy> approvalPolicies)	Validates and snapshots the complete configuration before allocation.

Uses of OperationSecurityDescriptors.ApprovalCategory in zeroecho.pki.server.enrollment

Methods in zeroecho.pki.server.enrollment that return OperationSecurityDescriptors.ApprovalCategory

Modifier and Type	Method	Description
OperationSecurityDescriptors.ApprovalCategory	EnrollmentTransaction.Intent.approvalCategory()	Returns the value of the approvalCategory record component.

Constructors in zeroecho.pki.server.enrollment with parameters of type OperationSecurityDescriptors.ApprovalCategory

Modifier	Constructor	Description
	Intent(RealmId realmId, EnrollmentTransaction.Source source, EnrollmentTransaction.Requester requester, String transactionId, EnrollmentTransaction.Operation operation, PkiId requestId, X509EnrollmentPayload.Kind requestKind, String requestSha256, int requestBytes, PkiId authorityId, CertificateProfileRef profile, PkiId issuerId, PkiId pathId, String pathCommitment, Optional<Validity> validity, Optional<PkiId> predecessorId, Optional<String> predecessorSha256, OperationSecurityDescriptors.ApprovalCategory approvalCategory, Optional<ApprovalService.Policy> approvalPolicy, Optional<EnrollmentTransaction.ArtifactBinding> artifact, Instant createdAt, Instant expiresAt)	Validates complete, bounded, internally consistent admission references.