Package org.springframework.security.authorization

Class RequiredAuthoritiesAuthorizationManager<T>

java.lang.Object

org.springframework.security.authorization.RequiredAuthoritiesAuthorizationManager<T>

Type Parameters:

T - the type

All Implemented Interfaces:

AuthorizationManager<T>

public class RequiredAuthoritiesAuthorizationManager<T>
extends Object
implements AuthorizationManager<T>

An AuthorizationManager that requires all the authorities returned by a RequiredAuthoritiesRepository implementation.

Since:

7.0

See Also:

• AllAuthoritiesAuthorizationManager

Constructor Summary

Constructors

Constructor	Description
RequiredAuthoritiesAuthorizationManager(RequiredAuthoritiesRepository authorities)	Creates a new instance.

Method Summary

Modifier and Type	Method	Description
@Nullable AuthorizationResult	authorize(Supplier<? extends @Nullable Authentication> authentication, T object)	Determines if access is granted for a specific authentication and object.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.springframework.security.authorization.AuthorizationManager

verify

Constructor Details

RequiredAuthoritiesAuthorizationManager

public RequiredAuthoritiesAuthorizationManager(RequiredAuthoritiesRepository authorities)

Creates a new instance.

Parameters:

authorities - the RequiredAuthoritiesRepository to use. Cannot be null.

Method Details

authorize

public @Nullable AuthorizationResult authorize(Supplier<? extends @Nullable Authentication> authentication,
 T object)

Description copied from interface: AuthorizationManager

Determines if access is granted for a specific authentication and object.

Specified by:

authorize in interface AuthorizationManager<T>

Parameters:

authentication - the Supplier of the Authentication to authorize

object - the AuthorizationManager object to authorize

Returns:

an AuthorizationResult