Class MethodSecurityInterceptor

  • All Implemented Interfaces:
    org.aopalliance.aop.Advice, org.aopalliance.intercept.Interceptor, org.aopalliance.intercept.MethodInterceptor, org.springframework.beans.factory.Aware, org.springframework.beans.factory.InitializingBean, org.springframework.context.ApplicationEventPublisherAware, org.springframework.context.MessageSourceAware
    Direct Known Subclasses:

    public class MethodSecurityInterceptor
    extends AbstractSecurityInterceptor
    implements org.aopalliance.intercept.MethodInterceptor
    Provides security interception of AOP Alliance based method invocations.

    The SecurityMetadataSource required by this security interceptor is of type MethodSecurityMetadataSource. This is shared with the AspectJ based security interceptor (AspectJSecurityInterceptor), since both work with Java Methods.

    Refer to AbstractSecurityInterceptor for details on the workflow.

    • Constructor Detail

      • MethodSecurityInterceptor

        public MethodSecurityInterceptor()
    • Method Detail

      • getSecureObjectClass

        public java.lang.Class<?> getSecureObjectClass()
        Description copied from class: AbstractSecurityInterceptor
        Indicates the type of secure objects the subclass will be presenting to the abstract parent for processing. This is used to ensure collaborators wired to the AbstractSecurityInterceptor all support the indicated secure object class.
        Specified by:
        getSecureObjectClass in class AbstractSecurityInterceptor
        the type of secure object the subclass provides services for
      • invoke

        public java.lang.Object invoke​(org.aopalliance.intercept.MethodInvocation mi)
                                throws java.lang.Throwable
        This method should be used to enforce security on a MethodInvocation.
        Specified by:
        invoke in interface org.aopalliance.intercept.MethodInterceptor
        mi - The method being invoked which requires a security decision
        The returned value from the method invocation (possibly modified by the AfterInvocationManager).
        java.lang.Throwable - if any error occurs