public class PostInvocationAdviceProvider extends Object implements AfterInvocationProvider
PostInvocationAuthorizationAdvice
instance
passing it the PostInvocationAttribute created from @PostAuthorize and @PostFilter annotations.Modifier and Type | Field and Description |
---|---|
protected org.apache.commons.logging.Log |
logger |
Constructor and Description |
---|
PostInvocationAdviceProvider(PostInvocationAuthorizationAdvice postAdvice) |
Modifier and Type | Method and Description |
---|---|
Object |
decide(Authentication authentication,
Object object,
Collection<ConfigAttribute> config,
Object returnedObject) |
boolean |
supports(Class<?> clazz)
Indicates whether the
AfterInvocationProvider is able to provide "after invocation"
processing for the indicated secured object type. |
boolean |
supports(ConfigAttribute attribute)
Indicates whether this
AfterInvocationProvider is able to participate in a decision
involving the passed ConfigAttribute . |
public PostInvocationAdviceProvider(PostInvocationAuthorizationAdvice postAdvice)
public Object decide(Authentication authentication, Object object, Collection<ConfigAttribute> config, Object returnedObject) throws AccessDeniedException
decide
in interface AfterInvocationProvider
AccessDeniedException
public boolean supports(ConfigAttribute attribute)
AfterInvocationProvider
AfterInvocationProvider
is able to participate in a decision
involving the passed ConfigAttribute
.This allows the
AbstractSecurityInterceptor
to check every configuration attribute can be consumed by the
configured AccessDecisionManager
and/or RunAsManager
and/or
AccessDecisionManager
.
supports
in interface AfterInvocationProvider
attribute
- a configuration attribute that has been configured against the
AbstractSecurityInterceptor
AfterInvocationProvider
can support the passed configuration attributepublic boolean supports(Class<?> clazz)
AfterInvocationProvider
AfterInvocationProvider
is able to provide "after invocation"
processing for the indicated secured object type.supports
in interface AfterInvocationProvider
clazz
- the class of secure object that is being queried