Package org.springframework.security.access

Interface SecurityMetadataSource

All Superinterfaces:

org.springframework.aop.framework.AopInfrastructureBean

All Known Subinterfaces:

FilterInvocationSecurityMetadataSource, MessageSecurityMetadataSource, MethodSecurityMetadataSource

All Known Implementing Classes:

AbstractFallbackMethodSecurityMetadataSource, AbstractMethodSecurityMetadataSource, DefaultFilterInvocationSecurityMetadataSource, DefaultMessageSecurityMetadataSource, DelegatingMethodSecurityMetadataSource, ExpressionBasedFilterInvocationSecurityMetadataSource, Jsr250MethodSecurityMetadataSource, MapBasedMethodSecurityMetadataSource, PrePostAnnotationSecurityMetadataSource, SecuredAnnotationSecurityMetadataSource

@Deprecated
public interface SecurityMetadataSource
extends org.springframework.aop.framework.AopInfrastructureBean

Deprecated.

In modern Spring Security APIs, each API manages its own configuration context. As such there is no direct replacement for this interface. In the case of method security, please see SecurityAnnotationScanner and AuthorizationManager. In the case of channel security, please see HttpsRedirectFilter. In the case of web security, please see AuthorizationManager.

Implemented by classes that store and can identify the ConfigAttributes that applies to a given secure object invocation.

Method Summary

Modifier and Type	Method	Description
Collection<ConfigAttribute>	getAllConfigAttributes()	Deprecated. If available, returns all of the ConfigAttributes defined by the implementing class.
Collection<ConfigAttribute>	getAttributes(Object object)	Deprecated. Accesses the ConfigAttributes that apply to a given secure object.
boolean	supports(Class<?> clazz)	Deprecated. Indicates whether the SecurityMetadataSource implementation is able to provide ConfigAttributes for the indicated secure object type.

Method Details

getAttributes

Collection<ConfigAttribute> getAttributes(Object object)
                                   throws IllegalArgumentException

Deprecated.

Accesses the ConfigAttributes that apply to a given secure object.

Parameters:

object - the object being secured

Returns:

the attributes that apply to the passed in secured object. Should return an empty collection if there are no applicable attributes.

Throws:

IllegalArgumentException - if the passed object is not of a type supported by the SecurityMetadataSource implementation

getAllConfigAttributes

Collection<ConfigAttribute> getAllConfigAttributes()

Deprecated.

If available, returns all of the ConfigAttributes defined by the implementing class.

This is used by the AbstractSecurityInterceptor to perform startup time validation of each ConfigAttribute configured against it.

Returns:

the ConfigAttributes or null if unsupported

supports

boolean supports(Class<?> clazz)

Deprecated.

Indicates whether the SecurityMetadataSource implementation is able to provide ConfigAttributes for the indicated secure object type.

Parameters:

clazz - the class that is being queried

Returns:

true if the implementation can process the indicated class