Package org.springframework.security.access.intercept
A secure object is a term frequently used throughout the security system. It
does not refer to a business object that is being secured, but instead refers to
some infrastructure object that can have security facilities provided for it by Spring
Security. For example, one secure object would be MethodInvocation
, whilst
another would be HTTP org.springframework.security.web.FilterInvocation
. Note
these are infrastructure objects and their design allows them to represent a large
variety of actual resources that might need to be secured, such as business objects or
HTTP request URLs.
Each secure object typically has its own interceptor package. Each package usually
includes a concrete security interceptor (which subclasses
AbstractSecurityInterceptor
) and
an appropriate SecurityMetadataSource
for
the type of resources the secure object represents.
-
ClassDescriptionDeprecated.Deprecated.Use delegation with
AuthorizationManager
Deprecated.Use delegation withAuthorizationManager
Deprecated.Use delegation withAuthorizationManager
Deprecated.UseAuthorizationManager
insteadDeprecated.Authentication is now separated from authorization in Spring Security.Deprecated.Authentication is now separated from authorization in Spring Security.Deprecated.Authentication is now separated from authorization in Spring Security.Deprecated.Authentication is now separated from authorization in Spring Security.
AuthorizationFilter
instead for filter security,AuthorizationChannelInterceptor
for messaging security, orAuthorizationManagerBeforeMethodInterceptor
andAuthorizationManagerAfterMethodInterceptor
for method security.