java.lang.Object | ||
↳ | org.springframework.security.access.method.AbstractMethodSecurityMetadataSource | |
↳ | org.springframework.security.access.method.AbstractFallbackMethodSecurityMetadataSource |
Known Direct Subclasses |
Abstract implementation of MethodSecurityMetadataSource
that supports both Spring AOP and AspectJ and
performs attribute resolution from: 1. specific target method; 2. target class; 3. declaring method;
4. declaring class/interface. Use with DelegatingMethodSecurityMetadataSource
for caching support.
This class mimics the behaviour of Spring's AbstractFallbackTransactionAttributeSource class.
Note that this class cannot extract security metadata where that metadata is expressed by way of a target method/class (i.e. #1 and #2 above) AND the target method/class is encapsulated in another proxy object. Spring Security does not walk a proxy chain to locate the concrete/final target object. Consider making Spring Security your final advisor (so it advises the final target, as opposed to another proxy), move the metadata to declared methods or interfaces the proxy implements, or provide your own replacement MethodSecurityMetadataSource.
[Expand]
Inherited Fields | |||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|
From class
org.springframework.security.access.method.AbstractMethodSecurityMetadataSource
|
Public Constructors | |||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|
Public Methods | |||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|
Protected Methods | |||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|
Obtains the security metadata registered against the specified class.
| |||||||||||
Obtains the security metadata applicable to the specified method invocation.
|
[Expand]
Inherited Methods | |||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|
From class
org.springframework.security.access.method.AbstractMethodSecurityMetadataSource
| |||||||||||
From class
java.lang.Object
| |||||||||||
From interface
org.springframework.security.access.SecurityMetadataSource
| |||||||||||
From interface
org.springframework.security.access.method.MethodSecurityMetadataSource
|
Obtains the security metadata registered against the specified class.
Subclasses should only return metadata expressed at a class level. Subclasses should NOT
aggregate metadata for each method registered against a class, as the abstract superclass
will separate invoke findAttributes(Method, Class)
for individual methods as
appropriate.
clazz | the target class for the invocation (never null ) |
---|
Obtains the security metadata applicable to the specified method invocation.
Note that the getDeclaringClass()
may not equal the targetClass
.
Both parameters are provided to assist subclasses which may wish to provide advanced
capabilities related to method metadata being "registered" against a method even if the
target class does not declare the method (i.e. the subclass may only inherit the method).
method | the method for the current invocation (never null ) |
---|---|
targetClass | the target class for the invocation (may be null ) |