Uses of Record Class
zeroecho.pki.server.Permission.Resource

Packages that use Permission.Resource

Package	Description
zeroecho.pki.server

Uses of Permission.Resource in zeroecho.pki.server

Methods in zeroecho.pki.server that return Permission.Resource

Modifier and Type	Method	Description
Permission.Resource	AuthorizationEngine.Request.resource()	Returns the value of the resource record component.
Permission.Resource	ServerControlOperation.EvaluateAuthorization.resource()	Returns the value of the resource record component.
Permission.Resource	ServerOperationGateway.Request.resource()	Returns the value of the resource record component.
Permission.Resource	ServerControlOperation.RequestApproval.targetResource()	Returns the value of the targetResource record component.

Methods in zeroecho.pki.server with parameters of type Permission.Resource

Modifier and Type	Method	Description
AuthorizationEngine.Decision	ServerOperationGateway.authorizeControl(String principalId, Permission.Action action, Permission.Resource resource, Permission.Context context, String correlationId)	Authorizes one non-PKI administrative control resource through the same default-deny engine used for typed operations.
String	OperationSecurityDescriptors.commitment(RealmId realmId, PkiOperation operation, Permission.Resource resource)	Computes an exact deterministic safe PKI-operation commitment.
String	OperationSecurityDescriptors.commitment(RealmId realmId, AdministrativeOperation operation, Permission.Resource resource)	Computes an exact deterministic commitment for either closed operation family.
ServerControlOperationOutcome	ServerControlOperationExecutor.execute(ServerControlOperation operation, String actorPrincipalId, Permission.Resource authorizedResource, Optional<String> approvalId, CancellationSignal cancellation)	Executes exactly one already-authorized control operation synchronously.
void	OperationSecurityDescriptors.validateResource(PkiOperation operation, Permission.Resource resource)	Verifies that caller-supplied security scope matches operation identities.
void	OperationSecurityDescriptors.validateResource(PkiSigningOperation operation, Permission.Resource resource)	Checks the exact resource of a signing request before preparation.

Constructors in zeroecho.pki.server with parameters of type Permission.Resource

Modifier	Constructor	Description
	EvaluateAuthorization(String principalId, Permission.Action action, Permission.Resource resource, Permission.Relationship relationship, Permission.DataView dataView, Permission.Context context)	Validates the operation's immutable input.
	Request(RealmId realmId, AuthorityExposurePolicy exposure, SecurityPrincipal principal, Permission.Action action, Permission.Resource resource, Permission.Relationship relationship, Permission.DataView dataView, Permission.Context context, List<Permission.Grant> grants, Set<String> breakGlassGrantIds)	Validates and snapshots the authorization input.
	Request(RealmId realmId, String principalId, PkiOperation operation, Permission.Resource resource, Permission.Relationship relationship, Permission.Context context, Optional<String> approvalId, String correlationId)	Wraps an existing PKI operation for source-compatible embedded callers.
	Request(RealmId realmId, String principalId, AdministrativeAuthenticationMode authenticationMode, Optional<String> transportPrincipalId, Optional<CertificateIdentityEvidence> credentialEvidence, AdministrativeOperation operation, Permission.Resource resource, Permission.Relationship relationship, Permission.Context context, Optional<String> approvalId, String correlationId)	Validates the immutable request.
	Request(RealmId realmId, String principalId, AdministrativeAuthenticationMode authenticationMode, Optional<String> transportPrincipalId, AdministrativeOperation operation, Permission.Resource resource, Permission.Relationship relationship, Permission.Context context, Optional<String> approvalId, String correlationId)	Creates an embedded request with no enrollment credential evidence.
	Request(RealmId realmId, String principalId, AdministrativeOperation operation, Permission.Resource resource, Permission.Relationship relationship, Permission.Context context, Optional<String> approvalId, String correlationId)	Creates a direct-mTLS request for existing embedded control callers.
	RequestApproval(String approvalId, AdministrativeOperation targetOperation, Permission.Resource targetResource)	Validates the operation's immutable input.