AspectJMethodSecurityInterceptor

Class Overview

AspectJ JoinPoint security interceptor which wraps the JoinPoint in a MethodInvocation adapter to make it compatible with security infrastructure classes which only support MethodInvocations.

One of the invoke methods should be called from the around() advice in your aspect. Alternatively you can use one of the pre-defined aspects from the aspects module.

Summary

[Expand] Inherited Fields
From class org.springframework.security.access.intercept.AbstractSecurityInterceptor protected final Log logger protected MessageSourceAccessor messages

[Expand] Inherited Methods
From class org.springframework.security.access.intercept.aopalliance.MethodSecurityInterceptor Class<?> getSecureObjectClass() Indicates the type of secure objects the subclass will be presenting to the abstract parent for processing. MethodSecurityMetadataSource getSecurityMetadataSource() Object invoke(MethodInvocation mi) This method should be used to enforce security on a MethodInvocation. SecurityMetadataSource obtainSecurityMetadataSource() void setSecurityMetadataSource(MethodSecurityMetadataSource newSource)
From class org.springframework.security.access.intercept.AbstractSecurityInterceptor Object afterInvocation(InterceptorStatusToken token, Object returnedObject) Completes the work of the AbstractSecurityInterceptor after the secure object invocation has been completed. void afterPropertiesSet() InterceptorStatusToken beforeInvocation(Object object) AccessDecisionManager getAccessDecisionManager() AfterInvocationManager getAfterInvocationManager() AuthenticationManager getAuthenticationManager() RunAsManager getRunAsManager() abstract Class<?> getSecureObjectClass() Indicates the type of secure objects the subclass will be presenting to the abstract parent for processing. boolean isAlwaysReauthenticate() boolean isRejectPublicInvocations() boolean isValidateConfigAttributes() abstract SecurityMetadataSource obtainSecurityMetadataSource() void setAccessDecisionManager(AccessDecisionManager accessDecisionManager) void setAfterInvocationManager(AfterInvocationManager afterInvocationManager) void setAlwaysReauthenticate(boolean alwaysReauthenticate) Indicates whether the AbstractSecurityInterceptor should ignore the isAuthenticated() property. void setApplicationEventPublisher(ApplicationEventPublisher applicationEventPublisher) void setAuthenticationManager(AuthenticationManager newManager) void setMessageSource(MessageSource messageSource) void setPublishAuthorizationSuccess(boolean publishAuthorizationSuccess) Only AuthorizationFailureEvent will be published. void setRejectPublicInvocations(boolean rejectPublicInvocations) By rejecting public invocations (and setting this property to true), essentially you are ensuring that every secure object invocation advised by AbstractSecurityInterceptor has a configuration attribute defined. void setRunAsManager(RunAsManager runAsManager) void setValidateConfigAttributes(boolean validateConfigAttributes)
From class java.lang.Object Object clone() boolean equals(Object arg0) void finalize() final Class<?> getClass() int hashCode() final void notify() final void notifyAll() String toString() final void wait() final void wait(long arg0, int arg1) final void wait(long arg0)
From interface org.aopalliance.intercept.MethodInterceptor abstract Object invoke(MethodInvocation arg0)
From interface org.springframework.beans.factory.InitializingBean abstract void afterPropertiesSet()
From interface org.springframework.context.ApplicationEventPublisherAware abstract void setApplicationEventPublisher(ApplicationEventPublisher arg0)
From interface org.springframework.context.MessageSourceAware abstract void setMessageSource(MessageSource arg0)