org.springframework.security.access.vote

Class AffirmativeBased

java.lang.Object

org.springframework.security.access.vote.AbstractAccessDecisionManager

org.springframework.security.access.vote.AffirmativeBased

All Implemented Interfaces:

Aware, InitializingBean, MessageSourceAware, AccessDecisionManager

public class AffirmativeBased
extends AbstractAccessDecisionManager

Simple concrete implementation of AccessDecisionManager that grants access if any AccessDecisionVoter returns an affirmative response.

Field Summary

Fields inherited from class org.springframework.security.access.vote.AbstractAccessDecisionManager

logger, messages

Constructor Summary

Constructors

Constructor and Description
AffirmativeBased(List<AccessDecisionVoter<? extends Object>> decisionVoters)

Method Summary

Modifier and Type	Method and Description
void	decide(Authentication authentication, Object object, Collection<ConfigAttribute> configAttributes) This concrete implementation simply polls all configured AccessDecisionVoters and grants access if any AccessDecisionVoter voted affirmatively.

Methods inherited from class org.springframework.security.access.vote.AbstractAccessDecisionManager

afterPropertiesSet, checkAllowIfAllAbstainDecisions, getDecisionVoters, isAllowIfAllAbstainDecisions, setAllowIfAllAbstainDecisions, setMessageSource, supports, supports

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AffirmativeBased

public AffirmativeBased(List<AccessDecisionVoter<? extends Object>> decisionVoters)

Method Detail

decide

public void decide(Authentication authentication,
                   Object object,
                   Collection<ConfigAttribute> configAttributes)
            throws AccessDeniedException

This concrete implementation simply polls all configured AccessDecisionVoters and grants access if any AccessDecisionVoter voted affirmatively. Denies access only if there was a deny vote AND no affirmative votes.

If every AccessDecisionVoter abstained from voting, the decision will be based on the AbstractAccessDecisionManager.isAllowIfAllAbstainDecisions() property (defaults to false).

Parameters:

authentication - the caller invoking the method

object - the secured object

configAttributes - the configuration attributes associated with the method being invoked

Throws:

AccessDeniedException - if access is denied