org.springframework.security.acls.afterinvocation

Class AbstractAclProvider

java.lang.Object

org.springframework.security.acls.afterinvocation.AbstractAclProvider

All Implemented Interfaces:

AfterInvocationProvider

Direct Known Subclasses:

AclEntryAfterInvocationCollectionFilteringProvider, AclEntryAfterInvocationProvider

public abstract class AbstractAclProvider
extends java.lang.Object
implements AfterInvocationProvider

Abstract AfterInvocationProvider which provides commonly-used ACL-related services.

Field Summary

Fields

Modifier and Type	Field and Description
protected AclService	aclService
protected ObjectIdentityRetrievalStrategy	objectIdentityRetrievalStrategy
protected java.lang.String	processConfigAttribute
protected java.lang.Class<?>	processDomainObjectClass
protected java.util.List<Permission>	requirePermission
protected SidRetrievalStrategy	sidRetrievalStrategy

Constructor Summary

Constructors

Constructor and Description
AbstractAclProvider(AclService aclService, java.lang.String processConfigAttribute, java.util.List<Permission> requirePermission)

Method Summary

Modifier and Type	Method and Description
protected java.lang.Class<?>	getProcessDomainObjectClass()
protected boolean	hasPermission(Authentication authentication, java.lang.Object domainObject)
void	setObjectIdentityRetrievalStrategy(ObjectIdentityRetrievalStrategy objectIdentityRetrievalStrategy)
protected void	setProcessConfigAttribute(java.lang.String processConfigAttribute)
void	setProcessDomainObjectClass(java.lang.Class<?> processDomainObjectClass)
void	setSidRetrievalStrategy(SidRetrievalStrategy sidRetrievalStrategy)
boolean	supports(java.lang.Class<?> clazz) This implementation supports any type of class, because it does not query the presented secure object.
boolean	supports(ConfigAttribute attribute) Indicates whether this AfterInvocationProvider is able to participate in a decision involving the passed ConfigAttribute.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.springframework.security.access.AfterInvocationProvider

decide

Field Detail

aclService

protected final AclService aclService

processDomainObjectClass

protected java.lang.Class<?> processDomainObjectClass

objectIdentityRetrievalStrategy

protected ObjectIdentityRetrievalStrategy objectIdentityRetrievalStrategy

sidRetrievalStrategy

protected SidRetrievalStrategy sidRetrievalStrategy

processConfigAttribute

protected java.lang.String processConfigAttribute

requirePermission

protected final java.util.List<Permission> requirePermission

Constructor Detail

AbstractAclProvider

public AbstractAclProvider(AclService aclService,
                           java.lang.String processConfigAttribute,
                           java.util.List<Permission> requirePermission)

Method Detail

getProcessDomainObjectClass

protected java.lang.Class<?> getProcessDomainObjectClass()

hasPermission

protected boolean hasPermission(Authentication authentication,
                                java.lang.Object domainObject)

setObjectIdentityRetrievalStrategy

public void setObjectIdentityRetrievalStrategy(ObjectIdentityRetrievalStrategy objectIdentityRetrievalStrategy)

setProcessConfigAttribute

protected void setProcessConfigAttribute(java.lang.String processConfigAttribute)

setProcessDomainObjectClass

public void setProcessDomainObjectClass(java.lang.Class<?> processDomainObjectClass)

setSidRetrievalStrategy

public void setSidRetrievalStrategy(SidRetrievalStrategy sidRetrievalStrategy)

supports

public boolean supports(ConfigAttribute attribute)

Description copied from interface: AfterInvocationProvider

Indicates whether this AfterInvocationProvider is able to participate in a decision involving the passed ConfigAttribute.

This allows the AbstractSecurityInterceptor to check every configuration attribute can be consumed by the configured AccessDecisionManager and/or RunAsManager and/or AccessDecisionManager.

Specified by:

supports in interface AfterInvocationProvider

Parameters:

attribute - a configuration attribute that has been configured against the AbstractSecurityInterceptor

Returns:

true if this AfterInvocationProvider can support the passed configuration attribute

supports

public boolean supports(java.lang.Class<?> clazz)

This implementation supports any type of class, because it does not query the presented secure object.

Specified by:

supports in interface AfterInvocationProvider

Parameters:

clazz - the secure object

Returns:

always true