Package org.springframework.security.authorization

Class AuthoritiesAuthorizationManager

java.lang.Object

org.springframework.security.authorization.AuthoritiesAuthorizationManager

All Implemented Interfaces:

AuthorizationManager<Collection<String>>

public final class AuthoritiesAuthorizationManager
extends Object
implements AuthorizationManager<Collection<String>>

An AuthorizationManager that determines if the current user is authorized by evaluating if the Authentication contains any of the specified authorities.

Since:

6.1

Constructor Summary

Constructors

Constructor	Description
AuthoritiesAuthorizationManager()

Method Summary

Modifier and Type	Method	Description
AuthorizationResult	authorize(Supplier<? extends @Nullable Authentication> authentication, Collection<String> authorities)	Determines if the current user is authorized by evaluating if the Authentication contains any of specified authorities.
void	setRoleHierarchy(RoleHierarchy roleHierarchy)	Sets the RoleHierarchy to be used.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.springframework.security.authorization.AuthorizationManager

verify

Constructor Details

AuthoritiesAuthorizationManager

public AuthoritiesAuthorizationManager()

Method Details

setRoleHierarchy

public void setRoleHierarchy(RoleHierarchy roleHierarchy)

Sets the RoleHierarchy to be used. Default is NullRoleHierarchy. Cannot be null.

Parameters:

roleHierarchy - the RoleHierarchy to use

authorize

public AuthorizationResult authorize(Supplier<? extends @Nullable Authentication> authentication,
 Collection<String> authorities)

Determines if the current user is authorized by evaluating if the Authentication contains any of specified authorities.

Specified by:

authorize in interface AuthorizationManager<Collection<String>>

Parameters:

authentication - the Supplier of the Authentication to check

authorities - the collection of authority strings to check

Returns:

an AuthorityAuthorizationDecision