|
Spring Security Framework | |||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | |||||||||
SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |
public interface AccessDecisionManager
Makes a final access control (authorization) decision.
Method Summary | |
---|---|
void |
decide(Authentication authentication,
Object object,
ConfigAttributeDefinition config)
Resolves an access control decision for the passed parameters. |
boolean |
supports(Class clazz)
Indicates whether the AccessDecisionManager implementation is able to provide access
control decisions for the indicated secured object type. |
boolean |
supports(ConfigAttribute attribute)
Indicates whether this AccessDecisionManager is able to process authorization requests
presented with the passed ConfigAttribute . |
Method Detail |
---|
void decide(Authentication authentication, Object object, ConfigAttributeDefinition config) throws AccessDeniedException, InsufficientAuthenticationException
authentication
- the caller invoking the methodobject
- the secured object being calledconfig
- the configuration attributes associated with the secured object being invoked
AccessDeniedException
- if access is denied as the authentication does not hold a required authority or
ACL privilege
InsufficientAuthenticationException
- if access is denied as the authentication does not provide a
sufficient level of trustboolean supports(ConfigAttribute attribute)
AccessDecisionManager
is able to process authorization requests
presented with the passed ConfigAttribute
.This allows the
AbstractSecurityInterceptor
to check every configuration attribute can be consumed by the
configured AccessDecisionManager
and/or RunAsManager
and/or
AfterInvocationManager
.
attribute
- a configuration attribute that has been configured against the
AbstractSecurityInterceptor
AccessDecisionManager
can support the passed configuration attributeboolean supports(Class clazz)
AccessDecisionManager
implementation is able to provide access
control decisions for the indicated secured object type.
clazz
- the class that is being queried
true
if the implementation can process the indicated class
|
Spring Security Framework | |||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | |||||||||
SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |