org.springframework.security.access.vote

Class AbstractAccessDecisionManager

java.lang.Object

org.springframework.security.access.vote.AbstractAccessDecisionManager

All Implemented Interfaces:

org.springframework.beans.factory.Aware, org.springframework.beans.factory.InitializingBean, org.springframework.context.MessageSourceAware, AccessDecisionManager

Direct Known Subclasses:

AffirmativeBased, ConsensusBased, UnanimousBased

public abstract class AbstractAccessDecisionManager
extends java.lang.Object
implements AccessDecisionManager, org.springframework.beans.factory.InitializingBean, org.springframework.context.MessageSourceAware

Abstract implementation of AccessDecisionManager.

Handles configuration of a bean context defined list of AccessDecisionVoters and the access control behaviour if all voters abstain from voting (defaults to deny access).

Field Summary

Fields

Modifier and Type	Field and Description
protected org.apache.commons.logging.Log	logger
protected org.springframework.context.support.MessageSourceAccessor	messages

Constructor Summary

Constructors

Modifier	Constructor and Description
protected	AbstractAccessDecisionManager(java.util.List<AccessDecisionVoter<?>> decisionVoters)

Method Summary

Modifier and Type	Method and Description
void	afterPropertiesSet()
protected void	checkAllowIfAllAbstainDecisions()
java.util.List<AccessDecisionVoter<?>>	getDecisionVoters()
boolean	isAllowIfAllAbstainDecisions()
void	setAllowIfAllAbstainDecisions(boolean allowIfAllAbstainDecisions)
void	setMessageSource(org.springframework.context.MessageSource messageSource)
boolean	supports(java.lang.Class<?> clazz) Iterates through all AccessDecisionVoters and ensures each can support the presented class.
boolean	supports(ConfigAttribute attribute) Indicates whether this AccessDecisionManager is able to process authorization requests presented with the passed ConfigAttribute.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.springframework.security.access.AccessDecisionManager

decide

Field Detail

logger

protected final org.apache.commons.logging.Log logger

messages

protected org.springframework.context.support.MessageSourceAccessor messages

Constructor Detail

AbstractAccessDecisionManager

protected AbstractAccessDecisionManager(java.util.List<AccessDecisionVoter<?>> decisionVoters)

Method Detail

afterPropertiesSet

public void afterPropertiesSet()

Specified by:

afterPropertiesSet in interface org.springframework.beans.factory.InitializingBean

checkAllowIfAllAbstainDecisions

protected final void checkAllowIfAllAbstainDecisions()

getDecisionVoters

public java.util.List<AccessDecisionVoter<?>> getDecisionVoters()

isAllowIfAllAbstainDecisions

public boolean isAllowIfAllAbstainDecisions()

setAllowIfAllAbstainDecisions

public void setAllowIfAllAbstainDecisions(boolean allowIfAllAbstainDecisions)

setMessageSource

public void setMessageSource(org.springframework.context.MessageSource messageSource)

Specified by:

setMessageSource in interface org.springframework.context.MessageSourceAware

supports

public boolean supports(ConfigAttribute attribute)

Description copied from interface: AccessDecisionManager

Indicates whether this AccessDecisionManager is able to process authorization requests presented with the passed ConfigAttribute.

This allows the AbstractSecurityInterceptor to check every configuration attribute can be consumed by the configured AccessDecisionManager and/or RunAsManager and/or AfterInvocationManager.

Specified by:

supports in interface AccessDecisionManager

Parameters:

attribute - a configuration attribute that has been configured against the AbstractSecurityInterceptor

Returns:

true if this AccessDecisionManager can support the passed configuration attribute

supports

public boolean supports(java.lang.Class<?> clazz)

Iterates through all AccessDecisionVoters and ensures each can support the presented class.

If one or more voters cannot support the presented class, false is returned.

Specified by:

supports in interface AccessDecisionManager

Parameters:

clazz - the type of secured object being presented

Returns:

true if this type is supported