Package org.springframework.security.authorization

Class AllAuthoritiesAuthorizationManager<T>

java.lang.Object

org.springframework.security.authorization.AllAuthoritiesAuthorizationManager<T>

All Implemented Interfaces:

AuthorizationManager<T>

public final class AllAuthoritiesAuthorizationManager<T>
extends Object
implements AuthorizationManager<T>

An AuthorizationManager that determines if the current user is authorized by evaluating if the Authentication contains all the specified authorities.

Since:

7.0

See Also:

• AuthorityAuthorizationManager

Method Summary

Modifier and Type	Method	Description
AuthorityAuthorizationDecision	authorize(Supplier<? extends @Nullable Authentication> authentication, T object)	Determines if the current user is authorized by evaluating if the Authentication contains any of specified authorities.
static <T> AllAuthoritiesAuthorizationManager<T>	hasAllAuthorities(String... authorities)	Creates an instance of AllAuthoritiesAuthorizationManager with the provided authorities.
static <T> AllAuthoritiesAuthorizationManager<T>	hasAllAuthorities(List<String> authorities)	Creates an instance of AllAuthoritiesAuthorizationManager with the provided authorities.
static <T> AllAuthoritiesAuthorizationManager<T>	hasAllPrefixedAuthorities(String prefix, String... authorities)	Creates an instance of AllAuthoritiesAuthorizationManager with the provided authorities.
static <T> AllAuthoritiesAuthorizationManager<T>	hasAllRoles(String... roles)	Creates an instance of AllAuthoritiesAuthorizationManager with the provided authorities.
void	setRoleHierarchy(RoleHierarchy roleHierarchy)	Sets the RoleHierarchy to be used.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.springframework.security.authorization.AuthorizationManager

verify

Method Details

setRoleHierarchy

public void setRoleHierarchy(RoleHierarchy roleHierarchy)

Sets the RoleHierarchy to be used. Default is NullRoleHierarchy. Cannot be null.

Parameters:

roleHierarchy - the RoleHierarchy to use

authorize

public AuthorityAuthorizationDecision authorize(Supplier<? extends @Nullable Authentication> authentication,
 T object)

Determines if the current user is authorized by evaluating if the Authentication contains any of specified authorities.

Specified by:

authorize in interface AuthorizationManager<T>

Parameters:

authentication - the Supplier of the Authentication to check

object - the object to check authorization on (not used).

Returns:

an AuthorityAuthorizationDecision

hasAllRoles

public static <T>
AllAuthoritiesAuthorizationManager<T> hasAllRoles(String... roles)

Creates an instance of AllAuthoritiesAuthorizationManager with the provided authorities.

Type Parameters:

T - the type of object being authorized

Parameters:

roles - the authorities to check for prefixed with "ROLE_". Each role should not start with "ROLE_" since it is automatically prepended already.

Returns:

the new instance

hasAllPrefixedAuthorities

public static <T>
AllAuthoritiesAuthorizationManager<T> hasAllPrefixedAuthorities(String prefix,
 String... authorities)

Creates an instance of AllAuthoritiesAuthorizationManager with the provided authorities.

Type Parameters:

T - the type of object being authorized

Parameters:

prefix - the prefix for authorities

authorities - the authorities to check for prefixed with prefix

Returns:

the new instance

hasAllAuthorities

public static <T>
AllAuthoritiesAuthorizationManager<T> hasAllAuthorities(String... authorities)

Creates an instance of AllAuthoritiesAuthorizationManager with the provided authorities.

Type Parameters:

T - the type of object being authorized

Parameters:

authorities - the authorities to check for

Returns:

the new instance

hasAllAuthorities

public static <T>
AllAuthoritiesAuthorizationManager<T> hasAllAuthorities(List<String> authorities)

Creates an instance of AllAuthoritiesAuthorizationManager with the provided authorities.

Type Parameters:

T - the type of object being authorized

Parameters:

authorities - the authorities to check for

Returns:

the new instance