public class Jsr250MethodSecurityMetadataSource extends AbstractFallbackMethodSecurityMetadataSource
logger
Constructor and Description |
---|
Jsr250MethodSecurityMetadataSource() |
Modifier and Type | Method and Description |
---|---|
protected java.util.Collection<ConfigAttribute> |
findAttributes(java.lang.Class<?> clazz)
Obtains the security metadata registered against the specified class.
|
protected java.util.Collection<ConfigAttribute> |
findAttributes(java.lang.reflect.Method method,
java.lang.Class<?> targetClass)
Obtains the security metadata applicable to the specified method invocation.
|
java.util.Collection<ConfigAttribute> |
getAllConfigAttributes()
If available, returns all of the
ConfigAttribute s defined by the
implementing class. |
void |
setDefaultRolePrefix(java.lang.String defaultRolePrefix)
Sets the default prefix to be added to
RolesAllowed . |
getAttributes
getAttributes, supports
public void setDefaultRolePrefix(java.lang.String defaultRolePrefix)
Sets the default prefix to be added to RolesAllowed
. For example, if
@RolesAllowed("ADMIN")
or @RolesAllowed("ADMIN")
is used, then the
role ROLE_ADMIN will be used when the defaultRolePrefix is "ROLE_" (default).
If null or empty, then no default role prefix is used.
defaultRolePrefix
- the default prefix to add to roles. Default "ROLE_".protected java.util.Collection<ConfigAttribute> findAttributes(java.lang.Class<?> clazz)
AbstractFallbackMethodSecurityMetadataSource
Subclasses should only return metadata expressed at a class level. Subclasses
should NOT aggregate metadata for each method registered against a class, as the
abstract superclass will separate invoke AbstractFallbackMethodSecurityMetadataSource.findAttributes(Method, Class)
for
individual methods as appropriate.
findAttributes
in class AbstractFallbackMethodSecurityMetadataSource
clazz
- the target class for the invocation (never null
)protected java.util.Collection<ConfigAttribute> findAttributes(java.lang.reflect.Method method, java.lang.Class<?> targetClass)
AbstractFallbackMethodSecurityMetadataSource
Note that the Method.getDeclaringClass()
may not equal the
targetClass
. Both parameters are provided to assist subclasses which
may wish to provide advanced capabilities related to method metadata being
"registered" against a method even if the target class does not declare the method
(i.e. the subclass may only inherit the method).
findAttributes
in class AbstractFallbackMethodSecurityMetadataSource
method
- the method for the current invocation (never null
)targetClass
- the target class for the invocation (may be null
)public java.util.Collection<ConfigAttribute> getAllConfigAttributes()
SecurityMetadataSource
ConfigAttribute
s defined by the
implementing class.
This is used by the AbstractSecurityInterceptor
to perform startup time
validation of each ConfigAttribute
configured against it.
ConfigAttribute
s or null
if unsupported