models.validators

Class CFValidator

lucee.Component
    extended by models.validators.CFValidator

Copyright since 2016 by Ortus Solutions, Corp www.ortussolutions.com --- This is the core validator which leverages CF Security via cflogin and cfloginuser https://helpx.adobe.com/coldfusion/developing-applications/developing-cfml-applications/securing-applications/using-coldfusion-security-tags-and-functions.html

Class Attributes:
  • threadsafe
    •  
  • singleton
    •  
  • synchronized : false
    •  
  • accessors : false
    •  
  • persistent : false
    •  
    Method Summary
    struct annotationValidator(any securedValue, any controller)
         This function is called once access to a handler/action is detected.
    struct ruleValidator(any rule, any controller)
         This function is called once an incoming event matches a security rule.
    private any validateSecurity(any roles)
         Validate Security.
     
    Methods inherited from class lucee.Component
    None
    Method Detail

    annotationValidator

    public struct annotationValidator(any securedValue, any controller)

    This function is called once access to a handler/action is detected. You will receive the secured annotation value and an instance of the ColdBox Controller You must return a struct with three keys: - allow:boolean True, user can continue access, false, invalid access actions will ensue - type:string(authentication|authorization) The type of block that ocurred. Either an authentication or an authorization issue. - messages:string Info/debug messages

    Parameters:
    securedValue
    controller
    Returns:
    { allow:boolean, type:string(authentication|authorization), messages:string }

    ruleValidator

    public struct ruleValidator(any rule, any controller)

    This function is called once an incoming event matches a security rule. You will receive the security rule that matched and an instance of the ColdBox controller. You must return a struct with three keys: - allow:boolean True, user can continue access, false, invalid access actions will ensue - type:string(authentication|authorization) The type of block that ocurred. Either an authentication or an authorization issue. - messages:string Info/debug messages

    Parameters:
    rule
    controller
    Returns:
    { allow:boolean, type:string(authentication|authorization), messages:string }

    validateSecurity

    private any validateSecurity(any roles)

    Validate Security

    Parameters:
    roles - true