org.sandev.basics.util
Interface TrustedInstanceLookup

public interface TrustedInstanceLookup

An interface declaring this object supports direct, full retrieval of the current message instance information. This access works outside of the context of any authorization processing, providing direct, trusted access to the current instance information.

TrustedInstanceLookup is typically used by the last Authorizer in front of the DataManager in an update query chain. This is the point where data that had previously been set to default values (for security reasons) must be restored for back-end processing. Trusted value restoration must happen before DataManager persistence (or the default values would be written). Restoration of the full instance information is usually required for other back-end processing nodes as well.

Method Summary

SandStructMessage

trustedGetCurrentInstance(SandStructMessage msg) Return the full, current instance of the given message.

Method Detail

trustedGetCurrentInstance

public SandStructMessage trustedGetCurrentInstance(SandStructMessage msg)
                                            throws SandException

Return the full, current instance of the given message. Any call to this method must ensure that unauthorized data is kept protected. The retrieved information may not exit the trusted back-end processing without being scrubbed within a specific authorization context.

This method looks up the current instance using the uniqueID of the specified message. If there is no current instance, then this method returns null. If processing fails for any reason, then this method throws an exception. This method must return the complete, unfiltered instance information or fail.

Throws:

SandException