Class MethodInvocationPrivilegeEvaluator
java.lang.Object
org.springframework.security.access.intercept.MethodInvocationPrivilegeEvaluator
- All Implemented Interfaces:
org.springframework.beans.factory.InitializingBean
public class MethodInvocationPrivilegeEvaluator
extends Object
implements org.springframework.beans.factory.InitializingBean
Allows users to determine whether they have "before invocation" privileges for a given
method invocation.
Of course, if an
AfterInvocationManager
is used to
authorize the result of a method invocation, this class cannot assist
determine whether or not the AfterInvocationManager
will enable access.
Instead this class aims to allow applications to determine whether or not the current
principal would be allowed to at least attempt to invoke the method, irrespective of
the "after" invocation handling.
-
Field Summary
-
Constructor Summary
-
Method Summary
Modifier and TypeMethodDescriptionvoid
boolean
isAllowed
(org.aopalliance.intercept.MethodInvocation invocation, Authentication authentication) void
setSecurityInterceptor
(AbstractSecurityInterceptor securityInterceptor)
-
Field Details
-
logger
protected static final org.apache.commons.logging.Log logger
-
-
Constructor Details
-
MethodInvocationPrivilegeEvaluator
public MethodInvocationPrivilegeEvaluator()
-
-
Method Details
-
afterPropertiesSet
public void afterPropertiesSet()- Specified by:
afterPropertiesSet
in interfaceorg.springframework.beans.factory.InitializingBean
-
isAllowed
public boolean isAllowed(org.aopalliance.intercept.MethodInvocation invocation, Authentication authentication) -
setSecurityInterceptor
-