public class

PostInvocationAdviceProvider

extends Object
implements AfterInvocationProvider
java.lang.Object
   ↳ org.springframework.security.access.prepost.PostInvocationAdviceProvider

Class Overview

AfterInvocationProvider which delegates to a PostInvocationAuthorizationAdvice instance passing it the PostInvocationAttribute created from @PostAuthorize and @PostFilter annotations.

Summary

Fields
protected final Log logger
Public Constructors
PostInvocationAdviceProvider(PostInvocationAuthorizationAdvice postAdvice)
Public Methods
Object decide(Authentication authentication, Object object, Collection<ConfigAttribute> config, Object returnedObject)
boolean supports(Class<?> clazz)
Indicates whether the AfterInvocationProvider is able to provide "after invocation" processing for the indicated secured object type.
boolean supports(ConfigAttribute attribute)
Indicates whether this AfterInvocationProvider is able to participate in a decision involving the passed ConfigAttribute.
[Expand]
Inherited Methods
From class java.lang.Object
From interface org.springframework.security.access.AfterInvocationProvider

Fields

protected final Log logger

Public Constructors

public PostInvocationAdviceProvider (PostInvocationAuthorizationAdvice postAdvice)

Public Methods

public Object decide (Authentication authentication, Object object, Collection<ConfigAttribute> config, Object returnedObject)

Throws
AccessDeniedException

public boolean supports (Class<?> clazz)

Indicates whether the AfterInvocationProvider is able to provide "after invocation" processing for the indicated secured object type.

Parameters
clazz the class of secure object that is being queried
Returns
  • true if the implementation can process the indicated class

public boolean supports (ConfigAttribute attribute)

Indicates whether this AfterInvocationProvider is able to participate in a decision involving the passed ConfigAttribute.

This allows the AbstractSecurityInterceptor to check every configuration attribute can be consumed by the configured AccessDecisionManager and/or RunAsManager and/or AccessDecisionManager.

Parameters
attribute a configuration attribute that has been configured against the AbstractSecurityInterceptor
Returns
  • true if this AfterInvocationProvider can support the passed configuration attribute