Package org.springframework.security.acls.afterinvocation

Class AbstractAclProvider

java.lang.Object

org.springframework.security.acls.afterinvocation.AbstractAclProvider

All Implemented Interfaces:

AfterInvocationProvider

Direct Known Subclasses:

AclEntryAfterInvocationCollectionFilteringProvider, AclEntryAfterInvocationProvider

@Deprecated
public abstract class AbstractAclProvider
extends Object
implements AfterInvocationProvider

Deprecated.

please use AclPermissionEvaluator instead. Spring Method Security annotations may also prove useful, for example @PostAuthorize("hasPermission(filterObject, read)")

Abstract AfterInvocationProvider which provides commonly-used ACL-related services.

Field Summary

Fields

Modifier and Type	Field	Description
protected final AclService	aclService	Deprecated.
protected ObjectIdentityRetrievalStrategy	objectIdentityRetrievalStrategy	Deprecated.
protected String	processConfigAttribute	Deprecated.
protected Class<?>	processDomainObjectClass	Deprecated.
protected final List<Permission>	requirePermission	Deprecated.
protected SidRetrievalStrategy	sidRetrievalStrategy	Deprecated.

Constructor Summary

Constructors

Constructor	Description
AbstractAclProvider(AclService aclService, String processConfigAttribute, List<Permission> requirePermission)	Deprecated.

Method Summary

Modifier and Type	Method	Description
protected Class<?>	getProcessDomainObjectClass()	Deprecated.
protected boolean	hasPermission(Authentication authentication, Object domainObject)	Deprecated.
void	setObjectIdentityRetrievalStrategy(ObjectIdentityRetrievalStrategy objectIdentityRetrievalStrategy)	Deprecated.
protected void	setProcessConfigAttribute(String processConfigAttribute)	Deprecated.
void	setProcessDomainObjectClass(Class<?> processDomainObjectClass)	Deprecated.
void	setSidRetrievalStrategy(SidRetrievalStrategy sidRetrievalStrategy)	Deprecated.
boolean	supports(Class<?> clazz)	Deprecated. This implementation supports any type of class, because it does not query the presented secure object.
boolean	supports(ConfigAttribute attribute)	Deprecated. Indicates whether this AfterInvocationProvider is able to participate in a decision involving the passed ConfigAttribute.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.springframework.security.access.AfterInvocationProvider

decide

Field Details

aclService

protected final AclService aclService

Deprecated.

processConfigAttribute

protected String processConfigAttribute

Deprecated.

processDomainObjectClass

protected Class<?> processDomainObjectClass

Deprecated.

objectIdentityRetrievalStrategy

protected ObjectIdentityRetrievalStrategy objectIdentityRetrievalStrategy

Deprecated.

sidRetrievalStrategy

protected SidRetrievalStrategy sidRetrievalStrategy

Deprecated.

requirePermission

protected final List<Permission> requirePermission

Deprecated.

Constructor Details

AbstractAclProvider

public AbstractAclProvider(AclService aclService,
 String processConfigAttribute,
 List<Permission> requirePermission)

Deprecated.

Method Details

getProcessDomainObjectClass

protected Class<?> getProcessDomainObjectClass()

Deprecated.

hasPermission

protected boolean hasPermission(Authentication authentication,
 Object domainObject)

Deprecated.

setObjectIdentityRetrievalStrategy

public void setObjectIdentityRetrievalStrategy(ObjectIdentityRetrievalStrategy objectIdentityRetrievalStrategy)

Deprecated.

setProcessConfigAttribute

protected void setProcessConfigAttribute(String processConfigAttribute)

Deprecated.

setProcessDomainObjectClass

public void setProcessDomainObjectClass(Class<?> processDomainObjectClass)

Deprecated.

setSidRetrievalStrategy

public void setSidRetrievalStrategy(SidRetrievalStrategy sidRetrievalStrategy)

Deprecated.

supports

public boolean supports(ConfigAttribute attribute)

Deprecated.

Description copied from interface: AfterInvocationProvider

Indicates whether this AfterInvocationProvider is able to participate in a decision involving the passed ConfigAttribute.

This allows the AbstractSecurityInterceptor to check every configuration attribute can be consumed by the configured AccessDecisionManager and/or RunAsManager and/or AccessDecisionManager.

Specified by:

supports in interface AfterInvocationProvider

Parameters:

attribute - a configuration attribute that has been configured against the AbstractSecurityInterceptor

Returns:

true if this AfterInvocationProvider can support the passed configuration attribute

supports

public boolean supports(Class<?> clazz)

Deprecated.

This implementation supports any type of class, because it does not query the presented secure object.

Specified by:

supports in interface AfterInvocationProvider

Parameters:

clazz - the secure object

Returns:

always true