com.ibm.itim.policy.sod
Interface IHierarchyConflicts

All Superinterfaces:
java.io.Serializable

public interface IHierarchyConflicts
extends java.io.Serializable

Provides role conflict information for potential roles added to a separation of duty policy exclusion list.

Since:
ITIM 5.1

Method Summary
 java.util.Set<java.lang.String> getChildConflicts(java.lang.String role)
          Gets the set of roles that the given role has a direct descendant relationship with.
 java.util.Set<java.lang.String> getParentConflicts(java.lang.String role)
          Gets the set of roles that the given role has a direct ancestor relationship with.
 java.util.Set<java.lang.String> getRolesWithChildConflicts()
          Gets the set of roles that are direct descendants of roles in the exclusion list or with other roles that might be added.
 java.util.Set<java.lang.String> getRolesWithParentConflicts()
          Gets the set of roles that are direct ancestors of: - Roles in the current exclusion list - Roles within the set of roles that are being added
 

Method Detail

getRolesWithParentConflicts

java.util.Set<java.lang.String> getRolesWithParentConflicts()
Gets the set of roles that are direct ancestors of: - Roles in the current exclusion list - Roles within the set of roles that are being added

Returns:
A set of role distinguished names displaying those roles being added which have direct ancestors.

getParentConflicts

java.util.Set<java.lang.String> getParentConflicts(java.lang.String role)
Gets the set of roles that the given role has a direct ancestor relationship with. This set can include roles that are currently in the exclusion list or that are being added to the list along with the given role.

Parameters:
role - The role that is in conflict
Returns:
A set of role distinguished names showing which roles are direct ancestors with the given role.

getRolesWithChildConflicts

java.util.Set<java.lang.String> getRolesWithChildConflicts()
Gets the set of roles that are direct descendants of roles in the exclusion list or with other roles that might be added. This set can include roles that are currently in the exclusion list or that are being added to the list along with the given role.

Returns:
A set of role distinguished names displaying which roles being added have direct descendants in other roles in the exclusion list or in the set of roles being added.

getChildConflicts

java.util.Set<java.lang.String> getChildConflicts(java.lang.String role)
Gets the set of roles that the given role has a direct descendant relationship with. This set can include roles that are currently in the exclusion list or that are being added to the list along with the given role.

Parameters:
role - The role that is in conflict
Returns:
A set of role distinguished names showing which roles are direct ancestors with the given role.


IBM Security Identity Manager 6.0.0
© Copyright International Business Machines Corporation 2007, 2012. All rights reserved. US Government Users Restricited Rights - Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.