public abstract class AbstractAuthorizeTag
extends java.lang.Object
Subclasses are expected to extract tag attribute values from the specific rendering technology, evaluate them as expressions if necessary, and set the String-based attributes of this class.
Constructor and Description |
---|
AbstractAuthorizeTag() |
Modifier and Type | Method and Description |
---|---|
boolean |
authorize()
Make an authorization decision by considering all <authorize> tag attributes.
|
boolean |
authorizeUsingAccessExpression()
Make an authorization decision based on a Spring EL expression.
|
boolean |
authorizeUsingUrlCheck()
Make an authorization decision based on the URL and HTTP method attributes.
|
protected org.springframework.expression.EvaluationContext |
createExpressionEvaluationContext(SecurityExpressionHandler<FilterInvocation> handler)
Allows the
EvaluationContext to be customized for variable lookup etc. |
java.lang.String |
getAccess() |
java.lang.String |
getMethod() |
protected abstract javax.servlet.ServletRequest |
getRequest()
This method allows subclasses to provide a way to access the ServletRequest
according to the rendering technology.
|
protected abstract javax.servlet.ServletResponse |
getResponse()
This method allows subclasses to provide a way to access the ServletResponse
according to the rendering technology.
|
protected abstract javax.servlet.ServletContext |
getServletContext()
This method allows subclasses to provide a way to access the ServletContext
according to the rendering technology.
|
java.lang.String |
getUrl() |
void |
setAccess(java.lang.String access) |
void |
setMethod(java.lang.String method) |
void |
setUrl(java.lang.String url) |
protected abstract javax.servlet.ServletRequest getRequest()
protected abstract javax.servlet.ServletResponse getResponse()
protected abstract javax.servlet.ServletContext getServletContext()
public boolean authorize() throws java.io.IOException
java.io.IOException
public boolean authorizeUsingAccessExpression() throws java.io.IOException
java.io.IOException
protected org.springframework.expression.EvaluationContext createExpressionEvaluationContext(SecurityExpressionHandler<FilterInvocation> handler)
EvaluationContext
to be customized for variable lookup etc.public boolean authorizeUsingUrlCheck() throws java.io.IOException
java.io.IOException
public java.lang.String getAccess()
public void setAccess(java.lang.String access)
public java.lang.String getUrl()
public void setUrl(java.lang.String url)
public java.lang.String getMethod()
public void setMethod(java.lang.String method)