access_control.idl

#ifndef __TECGRAF_OPENBUS_CORE_V20_SERVICES_ACCESSCONTROL_IDL__
#define __TECGRAF_OPENBUS_CORE_V20_SERVICES_ACCESSCONTROL_IDL__

#include "core.idl"
#include "credential.idl"

module tecgraf {

module openbus {

module core {

/* \brief Módulo de versionamento dos Serviços Básicos do OpenBus. */
module v2_0 {

module services {

module access_control {

/*
 * minor codes de CORBA::NO_PERMISSION do protocolo OpenBus:
 */
const unsigned long InvalidCredentialCode = 0x42555300; // 1112888064 "BUS\0"
const unsigned long InvalidChainCode      = 0x42555301; // 1112888065 "BUS\1"
const unsigned long InvalidLoginCode      = 0x42555302; // 1112888066 "BUS\2"
const unsigned long UnverifiedLoginCode   = 0x42555303; // 1112888067 "BUS\3"
const unsigned long UnknownBusCode        = 0x42555304; // 1112888068 "BUS\4"
const unsigned long InvalidPublicKeyCode  = 0x42555305; // 1112888069 "BUS\5"
const unsigned long NoCredentialCode      = 0x42555306; // 1112888070 "BUS\6"
/*
 * minor codes de CORBA::NO_PERMISSION da biblioteca de acesso do OpenBus
 */
const unsigned long NoLoginCode           = 0x425553FF; // 1112888319 "BUS\255"
const unsigned long InvalidRemoteCode     = 0x425553FE; // 1112888318 "BUS\254"
const unsigned long UnavailableBusCode    = 0x425553FD; // 1112888317 "BUS\253"
const unsigned long InvalidTargetCode     = 0x425553FC; // 1112888316 "BUS\252"

/****************************************************************************/
/* Faceta de Gerência de Credenciais de Entidades Logadas no Barramento *****/
/****************************************************************************/

exception MissingCertificate { Identifier entity; };



struct LoginAuthenticationInfo {
  HashValue hash; 
  OctetSeq data; 
};
struct LoginInfo {
  Identifier id; 
  Identifier entity; 
};
typedef sequence<LoginInfo> LoginInfoSeq;
struct CallChain {
  Identifier target; 
  LoginInfoSeq originators; 
  LoginInfo caller; 
};


typedef unsigned long ValidityTime;



exception InvalidPublicKey { string message; };

exception WrongEncoding { string message; };

exception AccessDenied {};

exception InvalidLogins { IdentifierSeq loginIds; };



interface LoginProcess {
  LoginInfo login(in OctetSeq pubkey, in EncryptedBlock encrypted,
                   out ValidityTime validity)
    raises (InvalidPublicKey, WrongEncoding, AccessDenied, ServiceFailure);
  
  oneway void cancel();
};

interface AccessControl {
  readonly attribute Identifier busid; 
  readonly attribute OctetSeq buskey; 
  LoginInfo loginByPassword(in Identifier entity, in OctetSeq pubkey,
                             in EncryptedBlock encrypted, out ValidityTime validity)
    raises (InvalidPublicKey, WrongEncoding, AccessDenied, ServiceFailure);
  
  LoginProcess startLoginByCertificate(in Identifier entity,
                                       out EncryptedBlock challenge)
    raises (MissingCertificate, ServiceFailure);
  
  LoginProcess startLoginBySharedAuth(out EncryptedBlock challenge)
    raises (ServiceFailure);
  
  void logout() raises (ServiceFailure);
  
  ValidityTime renew() raises (ServiceFailure);
  
  credential::SignedCallChain signChainFor(in Identifier target)
    raises (InvalidLogins, ServiceFailure);
};

/****************************************************************************/
/* Faceta de Notificação de Eventos de Credenciais de Autenticação **********/
/****************************************************************************/

interface LoginObserver {
  void entityLogout(in LoginInfo login);
};

interface LoginObserverSubscription {
  
  boolean watchLogin(in Identifier loginId) raises (ServiceFailure);
  
  void forgetLogin(in Identifier loginId) raises (ServiceFailure);
  
  void watchLogins(in IdentifierSeq loginIds)
    raises (InvalidLogins, ServiceFailure);
  
  void forgetLogins(in IdentifierSeq loginIds) raises (ServiceFailure);
  
  LoginInfoSeq getWatchedLogins();
  
  void remove() raises (ServiceFailure);
};

interface LoginRegistry {
  LoginInfoSeq getAllLogins() raises (UnauthorizedOperation, ServiceFailure);
  
  LoginInfoSeq getEntityLogins(in Identifier entity)
    raises (UnauthorizedOperation, ServiceFailure);
  
  boolean invalidateLogin(in Identifier loginId)
    raises (UnauthorizedOperation, ServiceFailure);
  
  LoginInfo getLoginInfo(in Identifier loginId, out OctetSeq pubkey)
    raises (InvalidLogins, ServiceFailure);
  
  ValidityTime getLoginValidity(in Identifier loginId)
    raises (ServiceFailure);
  
  LoginObserverSubscription subscribeObserver(in LoginObserver callback)
    raises (ServiceFailure);
};

}; // access_control

}; // services

}; // version

}; // core

}; // openbus

}; // tecgraf

#endif