org.springframework.security.access.intercept

Class MethodInvocationPrivilegeEvaluator

java.lang.Object

org.springframework.security.access.intercept.MethodInvocationPrivilegeEvaluator

public class MethodInvocationPrivilegeEvaluator
extends java.lang.Object

Allows users to determine whether they have "before invocation" privileges for a given method invocation.

Of course, if an AfterInvocationManager is used to authorize the result of a method invocation, this class cannot assist determine whether or not the AfterInvocationManager will enable access. Instead this class aims to allow applications to determine whether or not the current principal would be allowed to at least attempt to invoke the method, irrespective of the "after" invocation handling.

Field Summary

Fields

Modifier and Type	Field and Description
protected static Log	logger

Constructor Summary

Constructors

Constructor and Description
MethodInvocationPrivilegeEvaluator()

Method Summary

Modifier and Type	Method and Description
void	afterPropertiesSet()
boolean	isAllowed(MethodInvocation mi, Authentication authentication)
void	setSecurityInterceptor(AbstractSecurityInterceptor securityInterceptor)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

logger

protected static final Log logger

Constructor Detail

MethodInvocationPrivilegeEvaluator

public MethodInvocationPrivilegeEvaluator()

Method Detail

afterPropertiesSet

public void afterPropertiesSet()
                        throws java.lang.Exception

Throws:

java.lang.Exception

isAllowed

public boolean isAllowed(MethodInvocation mi,
                         Authentication authentication)

setSecurityInterceptor

public void setSecurityInterceptor(AbstractSecurityInterceptor securityInterceptor)