org.springframework.security.web.access.expression

Class DefaultWebSecurityExpressionHandler

java.lang.Object

org.springframework.security.access.expression.AbstractSecurityExpressionHandler<FilterInvocation>

org.springframework.security.web.access.expression.DefaultWebSecurityExpressionHandler

All Implemented Interfaces:

AopInfrastructureBean, Aware, ApplicationContextAware, SecurityExpressionHandler<FilterInvocation>, WebSecurityExpressionHandler

public class DefaultWebSecurityExpressionHandler
extends AbstractSecurityExpressionHandler<FilterInvocation>
implements WebSecurityExpressionHandler

Since:

3.0

Constructor Summary

Constructors

Constructor and Description
DefaultWebSecurityExpressionHandler()

Method Summary

Methods

Modifier and Type	Method and Description
protected SecurityExpressionOperations	createSecurityExpressionRoot(Authentication authentication, FilterInvocation fi) Implement in order to create a root object of the correct type for the supported invocation type.
void	setTrustResolver(AuthenticationTrustResolver trustResolver) Sets the AuthenticationTrustResolver to be used.

Methods inherited from class org.springframework.security.access.expression.AbstractSecurityExpressionHandler

createEvaluationContext, createEvaluationContextInternal, getExpressionParser, getPermissionEvaluator, getRoleHierarchy, setApplicationContext, setExpressionParser, setPermissionEvaluator, setRoleHierarchy

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.springframework.security.web.access.expression.WebSecurityExpressionHandler

createEvaluationContext

Methods inherited from interface org.springframework.security.access.expression.SecurityExpressionHandler

getExpressionParser

Constructor Detail

DefaultWebSecurityExpressionHandler

public DefaultWebSecurityExpressionHandler()

Method Detail

createSecurityExpressionRoot

protected SecurityExpressionOperations createSecurityExpressionRoot(Authentication authentication,
                                                        FilterInvocation fi)

Description copied from class: AbstractSecurityExpressionHandler

Implement in order to create a root object of the correct type for the supported invocation type.

Specified by:

createSecurityExpressionRoot in class AbstractSecurityExpressionHandler<FilterInvocation>

Parameters:

authentication - the current authentication object

fi - the invocation (filter, method, channel)

Returns:

the object wh

setTrustResolver

public void setTrustResolver(AuthenticationTrustResolver trustResolver)

Sets the AuthenticationTrustResolver to be used. The default is AuthenticationTrustResolverImpl.

Parameters:

trustResolver - the AuthenticationTrustResolver to use. Cannot be null.