public class MethodInvocationPrivilegeEvaluator extends Object implements InitializingBean
Of course, if an AfterInvocationManager
is used to authorize the
result of a method invocation, this class cannot assist determine whether or not the
AfterInvocationManager
will enable
access. Instead this class aims to allow applications to determine whether or not the current principal would be
allowed to at least attempt to invoke the method, irrespective of the "after" invocation handling.
Modifier and Type | Field and Description |
---|---|
protected static org.apache.commons.logging.Log |
logger |
Constructor and Description |
---|
MethodInvocationPrivilegeEvaluator() |
Modifier and Type | Method and Description |
---|---|
void |
afterPropertiesSet() |
boolean |
isAllowed(org.aopalliance.intercept.MethodInvocation mi,
Authentication authentication) |
void |
setSecurityInterceptor(AbstractSecurityInterceptor securityInterceptor) |
public void afterPropertiesSet() throws Exception
afterPropertiesSet
in interface InitializingBean
Exception
public boolean isAllowed(org.aopalliance.intercept.MethodInvocation mi, Authentication authentication)
public void setSecurityInterceptor(AbstractSecurityInterceptor securityInterceptor)