Package org.springframework.security.access.vote

Class AffirmativeBased

java.lang.Object

org.springframework.security.access.vote.AbstractAccessDecisionManager

org.springframework.security.access.vote.AffirmativeBased

All Implemented Interfaces:

org.springframework.beans.factory.Aware, org.springframework.beans.factory.InitializingBean, org.springframework.context.MessageSourceAware, AccessDecisionManager

public class AffirmativeBased
extends AbstractAccessDecisionManager

Simple concrete implementation of AccessDecisionManager that grants access if any AccessDecisionVoter returns an affirmative response.

Field Summary

Fields inherited from class org.springframework.security.access.vote.AbstractAccessDecisionManager

logger, messages

Constructor Summary

Constructors

Constructor	Description
AffirmativeBased(List<AccessDecisionVoter<?>> decisionVoters)

Method Summary

Modifier and Type	Method	Description
void	decide(Authentication authentication, Object object, Collection<ConfigAttribute> configAttributes)	This concrete implementation simply polls all configured AccessDecisionVoters and grants access if any AccessDecisionVoter voted affirmatively.

Methods inherited from class org.springframework.security.access.vote.AbstractAccessDecisionManager

afterPropertiesSet, checkAllowIfAllAbstainDecisions, getDecisionVoters, isAllowIfAllAbstainDecisions, setAllowIfAllAbstainDecisions, setMessageSource, supports, supports, toString

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Constructor Details

AffirmativeBased

public AffirmativeBased(List<AccessDecisionVoter<?>> decisionVoters)

Method Details

decide

public void decide(Authentication authentication,
 Object object,
 Collection<ConfigAttribute> configAttributes)
            throws AccessDeniedException

This concrete implementation simply polls all configured AccessDecisionVoters and grants access if any AccessDecisionVoter voted affirmatively. Denies access only if there was a deny vote AND no affirmative votes.

If every AccessDecisionVoter abstained from voting, the decision will be based on the AbstractAccessDecisionManager.isAllowIfAllAbstainDecisions() property (defaults to false).

Parameters:

authentication - the caller invoking the method

object - the secured object

configAttributes - the configuration attributes associated with the method being invoked

Throws:

AccessDeniedException - if access is denied