org.springframework.security.web.access.expression

Class WebSecurityExpressionRoot

java.lang.Object

org.springframework.security.access.expression.SecurityExpressionRoot

org.springframework.security.web.access.expression.WebSecurityExpressionRoot

All Implemented Interfaces:

SecurityExpressionOperations

public class WebSecurityExpressionRoot
extends SecurityExpressionRoot

Since:

3.0

Field Summary

Fields

Modifier and Type	Field and Description
javax.servlet.http.HttpServletRequest	request Allows direct access to the request object

Fields inherited from class org.springframework.security.access.expression.SecurityExpressionRoot

admin, authentication, create, delete, denyAll, permitAll, read, write

Constructor Summary

Constructors

Constructor and Description
WebSecurityExpressionRoot(Authentication a, FilterInvocation fi)

Method Summary

Modifier and Type	Method and Description
boolean	hasIpAddress(String ipAddress) Takes a specific IP address or a range using the IP/Netmask (e.g.

Methods inherited from class org.springframework.security.access.expression.SecurityExpressionRoot

denyAll, getAuthentication, getPrincipal, hasAnyAuthority, hasAnyRole, hasAuthority, hasPermission, hasPermission, hasRole, isAnonymous, isAuthenticated, isFullyAuthenticated, isRememberMe, permitAll, setDefaultRolePrefix, setPermissionEvaluator, setRoleHierarchy, setTrustResolver

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

request

public final javax.servlet.http.HttpServletRequest request

Allows direct access to the request object

Constructor Detail

WebSecurityExpressionRoot

public WebSecurityExpressionRoot(Authentication a,
                                 FilterInvocation fi)

Method Detail

hasIpAddress

public boolean hasIpAddress(String ipAddress)

Takes a specific IP address or a range using the IP/Netmask (e.g. 192.168.1.0/24 or 202.24.0.0/14).

Parameters:

ipAddress - the address or range of addresses from which the request must come.

Returns:

true if the IP address of the current request is in the required range.