Package org.springframework.security.authorization.method

Class AuthorizationManagerAfterMethodInterceptor

java.lang.Object

org.springframework.security.authorization.method.AuthorizationManagerAfterMethodInterceptor

All Implemented Interfaces:

org.aopalliance.aop.Advice, org.aopalliance.intercept.Interceptor, org.aopalliance.intercept.MethodInterceptor, org.springframework.aop.Advisor, org.springframework.aop.framework.AopInfrastructureBean, org.springframework.aop.PointcutAdvisor, org.springframework.core.Ordered

public final class AuthorizationManagerAfterMethodInterceptor
extends Object
implements org.springframework.core.Ordered, org.aopalliance.intercept.MethodInterceptor, org.springframework.aop.PointcutAdvisor, org.springframework.aop.framework.AopInfrastructureBean

A MethodInterceptor which can determine if an Authentication has access to the result of an MethodInvocation using an AuthorizationManager

Since:

5.6

Field Summary

Fields inherited from interface org.springframework.aop.Advisor

EMPTY_ADVICE

Fields inherited from interface org.springframework.core.Ordered

HIGHEST_PRECEDENCE, LOWEST_PRECEDENCE

Constructor Summary

Constructors

Constructor	Description
AuthorizationManagerAfterMethodInterceptor(org.springframework.aop.Pointcut pointcut, AuthorizationManager<MethodInvocationResult> authorizationManager)	Creates an instance.

Method Summary

Modifier and Type	Method	Description
org.aopalliance.aop.Advice	getAdvice()
int	getOrder()
org.springframework.aop.Pointcut	getPointcut()
Object	invoke(org.aopalliance.intercept.MethodInvocation mi)	Determine if an Authentication has access to the MethodInvocation using the AuthorizationManager.
boolean	isPerInstance()
static AuthorizationManagerAfterMethodInterceptor	postAuthorize()	Creates an interceptor for the PostAuthorize annotation
static AuthorizationManagerAfterMethodInterceptor	postAuthorize(AuthorizationManager<MethodInvocationResult> authorizationManager)	Creates an interceptor for the PostAuthorize annotation
static AuthorizationManagerAfterMethodInterceptor	postAuthorize(PostAuthorizeAuthorizationManager authorizationManager)	Creates an interceptor for the PostAuthorize annotation
void	setAuthorizationEventPublisher(AuthorizationEventPublisher eventPublisher)	Use this AuthorizationEventPublisher to publish the AuthorizationManager result.
void	setOrder(int order)
void	setSecurityContextHolderStrategy(SecurityContextHolderStrategy strategy)	Sets the SecurityContextHolderStrategy to use.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

AuthorizationManagerAfterMethodInterceptor

public AuthorizationManagerAfterMethodInterceptor(org.springframework.aop.Pointcut pointcut,
 AuthorizationManager<MethodInvocationResult> authorizationManager)

Creates an instance.

Parameters:

pointcut - the Pointcut to use

authorizationManager - the AuthorizationManager to use

Method Details

postAuthorize

public static AuthorizationManagerAfterMethodInterceptor postAuthorize()

Creates an interceptor for the PostAuthorize annotation

Returns:

the interceptor

postAuthorize

public static AuthorizationManagerAfterMethodInterceptor postAuthorize(PostAuthorizeAuthorizationManager authorizationManager)

Creates an interceptor for the PostAuthorize annotation

Parameters:

authorizationManager - the PostAuthorizeAuthorizationManager to use

Returns:

the interceptor

postAuthorize

public static AuthorizationManagerAfterMethodInterceptor postAuthorize(AuthorizationManager<MethodInvocationResult> authorizationManager)

Creates an interceptor for the PostAuthorize annotation

Parameters:

authorizationManager - the AuthorizationManager to use

Returns:

the interceptor

Since:

6.0

invoke

public Object invoke(org.aopalliance.intercept.MethodInvocation mi)
              throws Throwable

Determine if an Authentication has access to the MethodInvocation using the AuthorizationManager.

Specified by:

invoke in interface org.aopalliance.intercept.MethodInterceptor

Parameters:

mi - the MethodInvocation to check

Throws:

AccessDeniedException - if access is not granted

Throwable

getOrder

public int getOrder()

Specified by:

getOrder in interface org.springframework.core.Ordered

setOrder

public void setOrder(int order)

setAuthorizationEventPublisher

public void setAuthorizationEventPublisher(AuthorizationEventPublisher eventPublisher)

Use this AuthorizationEventPublisher to publish the AuthorizationManager result.

Parameters:

eventPublisher -

Since:

5.7

getPointcut

public org.springframework.aop.Pointcut getPointcut()

Specified by:

getPointcut in interface org.springframework.aop.PointcutAdvisor

getAdvice

public org.aopalliance.aop.Advice getAdvice()

Specified by:

getAdvice in interface org.springframework.aop.Advisor

isPerInstance

public boolean isPerInstance()

Specified by:

isPerInstance in interface org.springframework.aop.Advisor

setSecurityContextHolderStrategy

public void setSecurityContextHolderStrategy(SecurityContextHolderStrategy strategy)

Sets the SecurityContextHolderStrategy to use. The default action is to use the SecurityContextHolderStrategy stored in SecurityContextHolder.

Since:

5.8