com.ibm.commerce.security.commands

Class AuthenticationPolicyCmdImpl

java.lang.Object

com.ibm.websphere.command.TargetableCommandImpl

com.ibm.websphere.command.CacheableCommandImpl

com.ibm.commerce.command.MeasuredCacheableCommandImpl

com.ibm.commerce.command.AbstractECTargetableCommand

com.ibm.commerce.command.TaskCommandImpl

com.ibm.commerce.security.commands.AuthenticationPolicyCmdImpl

All Implemented Interfaces:

com.ibm.commerce.command.CacheableECCommand, ECCommand, ECTargetableCommand, TaskCommand, AuthenticationPolicyCmd, com.ibm.websphere.cache.Sizeable, com.ibm.websphere.command.CacheableCommand, com.ibm.websphere.command.Command, com.ibm.websphere.command.CommandCaller, com.ibm.websphere.command.TargetableCommand, java.io.Serializable

public class AuthenticationPolicyCmdImpl
extends TaskCommandImpl
implements AuthenticationPolicyCmd

Use this task command to enforce policies such as minimum password length. This task command is called by every command that performs verification or update of user credentials.

Before executing this task command, the methods listed below must be invoked.

• setLogonId
• setPassword

See Also:

Serialized Form

Field Summary

Fields

Modifier and Type	Field and Description
static java.lang.String	COPYRIGHT IBM Copyright statement
static java.lang.String	ERRTASK_NAME Error task name.

Fields inherited from class com.ibm.websphere.command.TargetableCommandImpl

LOCAL

Fields inherited from interface com.ibm.commerce.security.commands.AuthenticationPolicyCmd

defaultCommandClassName, NAME

Fields inherited from interface com.ibm.websphere.command.Command

serialVersionUID

Constructor Summary

Constructors

Constructor and Description
AuthenticationPolicyCmdImpl()

Method Summary

Modifier and Type	Method and Description
boolean	isPasswordCompliant() After this task is executed, this method returns whether the user had a password policy and if the supplied password complies with that policy.
void	performExecute() This command fetches the password policies and delegates to the validatePasswordCompliance() method to determine if the password specified satisfies the policies.
void	setAccountPolicy(java.lang.String strDefinedAccountPolicy) This method sets the account policy used to check this password.
void	setErrorTask(java.lang.String strErrorTask) This function allows for the default error view task of the command to be overwritten.
void	setLogonId(java.lang.String strLogonId) This method sets the logon ID under which the current user wishes to logon.
void	setPassword(java.lang.String strPassword) This method sets the password to use for authentication with the new logon ID.
void	validateParameters() This method validates parameters by ensuring that the logonID and password specified are both non-zero length strings.

Methods inherited from class com.ibm.commerce.command.AbstractECTargetableCommand

accessControlCheck, checkIsAllowed, checkResourcePermission, createCommandExecutionEvent, execute, getAccCheck, getCommandContext, getCommandIfName, getCommandName, getCommandStoreId, getDefaultProperties, getExceptionInvokeParameters, getObjectSize, getPostInvokeParameters, getPreInvokeParameters, getResources, getStoreId, getUser, getUserId, isReadyToCallExecute, reset, setAccCheck, setCommandContext, setCommandIfName, setCommandStoreId, setDefaultProperties

Methods inherited from class com.ibm.websphere.command.CacheableCommandImpl

executeFromCache, getCaller, getEntryInfo, getId, getSharingPolicy, postExecute, preExecute, setCaller, setObjectSize, unionDependencies, updateCache

Methods inherited from class com.ibm.websphere.command.TargetableCommandImpl

getCommandTarget, getCommandTargetName, getTargetPolicy, hasOutputProperties, setCommandTarget, setCommandTargetName, setHasOutputProperties, setOutputProperties, setTargetPolicy

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface com.ibm.commerce.command.CacheableECCommand

execute

Methods inherited from interface com.ibm.websphere.command.CacheableCommand

executeFromCache, getCaller, getEntryInfo, getId, getSharingPolicy, postExecute, preExecute, setCaller, updateCache

Methods inherited from interface com.ibm.websphere.command.TargetableCommand

getCommandTarget, getCommandTargetName, hasOutputProperties, setCommandTarget, setCommandTargetName, setOutputProperties

Methods inherited from interface com.ibm.websphere.command.Command

isReadyToCallExecute, reset

Methods inherited from interface com.ibm.websphere.command.CommandCaller

unionDependencies

Methods inherited from interface com.ibm.commerce.command.ECCommand

checkIsAllowed, checkResourcePermission, createCommandExecutionEvent, getAccCheck, getCommandContext, getCommandIfName, getCommandName, getCommandStoreId, getDefaultProperties, getExceptionInvokeParameters, getPostInvokeParameters, getPreInvokeParameters, getResources, getStoreId, getUser, getUserId, setAccCheck, setCommandContext, setCommandIfName, setCommandStoreId, setDefaultProperties

Field Detail

COPYRIGHT

public static final java.lang.String COPYRIGHT

IBM Copyright statement

See Also:

Constant Field Values

ERRTASK_NAME

public static java.lang.String ERRTASK_NAME

Error task name.

Constructor Detail

AuthenticationPolicyCmdImpl

public AuthenticationPolicyCmdImpl()

Method Detail

isPasswordCompliant

public boolean isPasswordCompliant()

After this task is executed, this method returns whether the user had a password policy and if the supplied password complies with that policy. If the user had a password policy and there is non-compliance then an exception is thrown.

Specified by:

isPasswordCompliant in interface AuthenticationPolicyCmd

Returns:

True if password complies with the user's password policy.

performExecute

public void performExecute()
                    throws ECException

This command fetches the password policies and delegates to the validatePasswordCompliance() method to determine if the password specified satisfies the policies. It terminates normally if the password matches the criteria and throws an ECApplicationException if a policy violation is detected. This method requires the following parameters to be set.

• Security/PasswordPolicy parameter to be set to true.
• MemberSubSystem/AuthenticationMode to be set to DB in the instance.xml file and to use database authentication.

Specified by:

performExecute in interface ECCommand

Specified by:

performExecute in interface com.ibm.websphere.command.TargetableCommand

Overrides:

performExecute in class AbstractECTargetableCommand

Throws:

ECException - thrown if a password policy violation is detected.

setAccountPolicy

public void setAccountPolicy(java.lang.String strDefinedAccountPolicy)

This method sets the account policy used to check this password. This overrides the default account policy for the user.

Specified by:

setAccountPolicy in interface AuthenticationPolicyCmd

Parameters:

strDefinedAccountPolicy - The account policy.

setErrorTask

public void setErrorTask(java.lang.String strErrorTask)

This function allows for the default error view task of the command to be overwritten.

Specified by:

setErrorTask in interface AuthenticationPolicyCmd

Parameters:

strErrorTask - The name of the new error view task.

setLogonId

public void setLogonId(java.lang.String strLogonId)

This method sets the logon ID under which the current user wishes to logon.

Specified by:

setLogonId in interface AuthenticationPolicyCmd

Parameters:

strLogonId - The login ID.

setPassword

public void setPassword(java.lang.String strPassword)

This method sets the password to use for authentication with the new logon ID.

Specified by:

setPassword in interface AuthenticationPolicyCmd

Parameters:

strPassword - The password.

validateParameters

public void validateParameters()
                        throws ECException

This method validates parameters by ensuring that the logonID and password specified are both non-zero length strings.

Specified by:

validateParameters in interface ECCommand

Overrides:

validateParameters in class AbstractECTargetableCommand

Throws:

ECException