Package org.springframework.security.access.vote

Class AbstractAccessDecisionManager

java.lang.Object
org.springframework.security.access.vote.AbstractAccessDecisionManager
All Implemented Interfaces:
org.springframework.beans.factory.Aware, org.springframework.beans.factory.InitializingBean, org.springframework.context.MessageSourceAware, AccessDecisionManager
Direct Known Subclasses:
AffirmativeBased, ConsensusBased, UnanimousBased
public abstract class AbstractAccessDecisionManager extends Object implements AccessDecisionManager, org.springframework.beans.factory.InitializingBean, org.springframework.context.MessageSourceAware
Abstract implementation of AccessDecisionManager.

Handles configuration of a bean context defined list of AccessDecisionVoters and the access control behaviour if all voters abstain from voting (defaults to deny access).

  • Field Details

    • logger

      protected final org.apache.commons.logging.Log logger

    • messages

      protected org.springframework.context.support.MessageSourceAccessor messages

  • Constructor Details

    • AbstractAccessDecisionManager

      protected AbstractAccessDecisionManager(List<AccessDecisionVoter<?>> decisionVoters)

  • Method Details

    • afterPropertiesSet

      public void afterPropertiesSet()
      Specified by:
      afterPropertiesSet in interface org.springframework.beans.factory.InitializingBean

    • checkAllowIfAllAbstainDecisions

      protected final void checkAllowIfAllAbstainDecisions()

    • getDecisionVoters

      public List<AccessDecisionVoter<?>> getDecisionVoters()

    • isAllowIfAllAbstainDecisions

      public boolean isAllowIfAllAbstainDecisions()

    • setAllowIfAllAbstainDecisions

      public void setAllowIfAllAbstainDecisions(boolean allowIfAllAbstainDecisions)

    • setMessageSource

      public void setMessageSource(org.springframework.context.MessageSource messageSource)
      Specified by:
      setMessageSource in interface org.springframework.context.MessageSourceAware

    • supports

      public boolean supports(ConfigAttribute attribute)
      Description copied from interface: AccessDecisionManager
      Indicates whether this AccessDecisionManager is able to process authorization requests presented with the passed ConfigAttribute.

      This allows the AbstractSecurityInterceptor to check every configuration attribute can be consumed by the configured AccessDecisionManager and/or RunAsManager and/or AfterInvocationManager.

      Specified by:
      supports in interface AccessDecisionManager
      Parameters:
      attribute - a configuration attribute that has been configured against the AbstractSecurityInterceptor
      Returns:
      true if this AccessDecisionManager can support the passed configuration attribute

    • supports

      public boolean supports(Class<?> clazz)
      Iterates through all AccessDecisionVoters and ensures each can support the presented class.

      If one or more voters cannot support the presented class, false is returned.

      Specified by:
      supports in interface AccessDecisionManager
      Parameters:
      clazz - the type of secured object being presented
      Returns:
      true if this type is supported

    • toString

      public String toString()
      Overrides:
      toString in class Object