Package org.springframework.security.access.expression

Class AbstractSecurityExpressionHandler<T>

java.lang.Object

org.springframework.security.access.expression.AbstractSecurityExpressionHandler<T>

All Implemented Interfaces:

org.springframework.aop.framework.AopInfrastructureBean, org.springframework.beans.factory.Aware, org.springframework.context.ApplicationContextAware, SecurityExpressionHandler<T>

Direct Known Subclasses:

DefaultHttpSecurityExpressionHandler, DefaultMessageSecurityExpressionHandler, DefaultMethodSecurityExpressionHandler, DefaultWebSecurityExpressionHandler

public abstract class AbstractSecurityExpressionHandler<T>
extends java.lang.Object
implements SecurityExpressionHandler<T>, org.springframework.context.ApplicationContextAware

Base implementation of the facade which isolates Spring Security's requirements for evaluating security expressions from the implementation of the underlying expression objects.

Since:

3.1

Constructor Summary

Constructors

Constructor	Description
AbstractSecurityExpressionHandler()

Method Summary

Modifier and Type	Method	Description
org.springframework.expression.EvaluationContext	createEvaluationContext(Authentication authentication, T invocation)	Invokes the internal template methods to create StandardEvaluationContext and SecurityExpressionRoot objects.
protected org.springframework.expression.spel.support.StandardEvaluationContext	createEvaluationContextInternal(Authentication authentication, T invocation)	Override to create a custom instance of StandardEvaluationContext.
protected abstract SecurityExpressionOperations	createSecurityExpressionRoot(Authentication authentication, T invocation)	Implement in order to create a root object of the correct type for the supported invocation type.
protected org.springframework.expression.BeanResolver	getBeanResolver()
org.springframework.expression.ExpressionParser	getExpressionParser()
protected PermissionEvaluator	getPermissionEvaluator()
protected RoleHierarchy	getRoleHierarchy()
void	setApplicationContext(org.springframework.context.ApplicationContext applicationContext)
void	setExpressionParser(org.springframework.expression.ExpressionParser expressionParser)
void	setPermissionEvaluator(PermissionEvaluator permissionEvaluator)
void	setRoleHierarchy(RoleHierarchy roleHierarchy)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.springframework.security.access.expression.SecurityExpressionHandler

createEvaluationContext

Constructor Detail

AbstractSecurityExpressionHandler

public AbstractSecurityExpressionHandler()

Method Detail

getExpressionParser

public final org.springframework.expression.ExpressionParser getExpressionParser()

Specified by:

getExpressionParser in interface SecurityExpressionHandler<T>

Returns:

an expression parser for the expressions used by the implementation.

setExpressionParser

public final void setExpressionParser(org.springframework.expression.ExpressionParser expressionParser)

createEvaluationContext

public final org.springframework.expression.EvaluationContext createEvaluationContext(Authentication authentication,
                                                                                      T invocation)

Invokes the internal template methods to create StandardEvaluationContext and SecurityExpressionRoot objects.

Specified by:

createEvaluationContext in interface SecurityExpressionHandler<T>

Parameters:

authentication - the current authentication object

invocation - the invocation (filter, method, channel)

Returns:

the context object for use in evaluating the expression, populated with a suitable root object.

createEvaluationContextInternal

protected org.springframework.expression.spel.support.StandardEvaluationContext createEvaluationContextInternal(Authentication authentication,
                                                                                                                T invocation)

Override to create a custom instance of StandardEvaluationContext.

The returned object will have a SecurityExpressionRootPropertyAccessor added, allowing beans in the ApplicationContext to be accessed via expression properties.

Parameters:

authentication - the current authentication object

invocation - the invocation (filter, method, channel)

Returns:

A StandardEvaluationContext or potentially a custom subclass if overridden.

createSecurityExpressionRoot

protected abstract SecurityExpressionOperations createSecurityExpressionRoot(Authentication authentication,
                                                                             T invocation)

Implement in order to create a root object of the correct type for the supported invocation type.

Parameters:

authentication - the current authentication object

invocation - the invocation (filter, method, channel)

Returns:

the object

getRoleHierarchy

protected RoleHierarchy getRoleHierarchy()

setRoleHierarchy

public void setRoleHierarchy(RoleHierarchy roleHierarchy)

getPermissionEvaluator

protected PermissionEvaluator getPermissionEvaluator()

setPermissionEvaluator

public void setPermissionEvaluator(PermissionEvaluator permissionEvaluator)

getBeanResolver

protected org.springframework.expression.BeanResolver getBeanResolver()

setApplicationContext

public void setApplicationContext(org.springframework.context.ApplicationContext applicationContext)

Specified by:

setApplicationContext in interface org.springframework.context.ApplicationContextAware