PrePostAnnotationSecurityMetadataSource

Class Overview

MethodSecurityMetadataSource which extracts metadata from the @PreFilter and @PreAuthorize annotations placed on a method. This class is merely responsible for locating the relevant annotations (if any). It delegates the actual ConfigAttribute creation to its PrePostInvocationAttributeFactory, thus decoupling itself from the mechanism which will enforce the annotations' behaviour.

Annotations may be specified on classes or methods, and method-specific annotations will take precedence. If you use any annotation and do not specify a pre-authorization condition, then the method will be allowed as if a @PreAuthorize("permitAll") were present.

Since we are handling multiple annotations here, it's possible that we may have to combine annotations defined in multiple locations for a single method - they may be defined on the method itself, or at interface or class level.

Summary

[Expand] Inherited Fields
From class org.springframework.security.access.method.AbstractMethodSecurityMetadataSource protected final Log logger

[Expand] Inherited Methods
From class org.springframework.security.access.method.AbstractMethodSecurityMetadataSource final Collection<ConfigAttribute> getAttributes(Object object) Accesses the ConfigAttributes that apply to a given secure object. final boolean supports(Class<?> clazz) Indicates whether the SecurityMetadataSource implementation is able to provide ConfigAttributes for the indicated secure object type.
From class java.lang.Object Object clone() boolean equals(Object arg0) void finalize() final Class<?> getClass() int hashCode() final void notify() final void notifyAll() String toString() final void wait() final void wait(long arg0, int arg1) final void wait(long arg0)
From interface org.springframework.security.access.SecurityMetadataSource abstract Collection<ConfigAttribute> getAllConfigAttributes() If available, returns all of the ConfigAttributes defined by the implementing class. abstract Collection<ConfigAttribute> getAttributes(Object object) Accesses the ConfigAttributes that apply to a given secure object. abstract boolean supports(Class<?> clazz) Indicates whether the SecurityMetadataSource implementation is able to provide ConfigAttributes for the indicated secure object type.
From interface org.springframework.security.access.method.MethodSecurityMetadataSource abstract Collection<ConfigAttribute> getAttributes(Method method, Class<?> targetClass)