Package org.springframework.security.access

package org.springframework.security.access

Core access-control related code, including security metadata related classes, interception code, access control annotations, EL support and voter-based implementations of the central AccessDecisionManager interface.

Related Packages

Package	Description
org.springframework.security.access.annotation	Support for JSR-250 and Spring Security @Secured annotations.
org.springframework.security.access.event	Authorization event and listener classes.
org.springframework.security.access.expression	Expression handling code to support the use of Spring-EL based expressions in @PreAuthorize, @PreFilter, @PostAuthorize and @PostFilter annotations.
org.springframework.security.access.hierarchicalroles	Role hierarchy implementation.
org.springframework.security.access.intercept	Abstract level security interception classes which are responsible for enforcing the configured security constraints for a secure object.
org.springframework.security.access.method	Provides SecurityMetadataSource implementations for securing Java method invocations via different AOP libraries.
org.springframework.security.access.prepost	Contains the infrastructure classes for handling the @PreAuthorize, @PreFilter, @PostAuthorize and @PostFilter annotations.
org.springframework.security.access.vote	Implements a vote-based approach to authorization decisions.

Class	Description
AccessDecisionManager	Deprecated. Use AuthorizationManager instead
AccessDecisionVoter<S>	Deprecated. Use AuthorizationManager instead
AccessDeniedException	Thrown if an Authentication object does not hold a required authority.
AfterInvocationProvider	Deprecated. Use delegation with AuthorizationManager
AuthorizationServiceException	Thrown if an authorization request could not be processed due to a system problem.
ConfigAttribute	Deprecated. In modern Spring Security APIs, each API manages its own configuration context.
PermissionCacheOptimizer	Allows permissions to be pre-cached when using pre or post filtering with expressions
PermissionEvaluator	Strategy used in expression evaluation to determine whether a user has a permission or permissions for a given domain object.
SecurityConfig	Deprecated. In modern Spring Security APIs, each API manages its own configuration context.
SecurityMetadataSource	Deprecated. In modern Spring Security APIs, each API manages its own configuration context.