public class

AffirmativeBased

extends AbstractAccessDecisionManager
java.lang.Object
   ↳ org.springframework.security.access.vote.AbstractAccessDecisionManager
     ↳ org.springframework.security.access.vote.AffirmativeBased

Class Overview

Simple concrete implementation of AccessDecisionManager that grants access if any AccessDecisionVoter returns an affirmative response.

Summary

[Expand]
Inherited Fields
From class org.springframework.security.access.vote.AbstractAccessDecisionManager
Public Constructors
AffirmativeBased()
This constructor is deprecated. Use constructor which takes voter list
AffirmativeBased(List<AccessDecisionVoter> decisionVoters)
Public Methods
void decide(Authentication authentication, Object object, Collection<ConfigAttribute> configAttributes)
This concrete implementation simply polls all configured AccessDecisionVoters and grants access if any AccessDecisionVoter voted affirmatively.
[Expand]
Inherited Methods
From class org.springframework.security.access.vote.AbstractAccessDecisionManager
From class java.lang.Object
From interface org.springframework.beans.factory.InitializingBean
From interface org.springframework.context.MessageSourceAware
From interface org.springframework.security.access.AccessDecisionManager

Public Constructors

public AffirmativeBased ()

This constructor is deprecated.
Use constructor which takes voter list

public AffirmativeBased (List<AccessDecisionVoter> decisionVoters)

Public Methods

public void decide (Authentication authentication, Object object, Collection<ConfigAttribute> configAttributes)

This concrete implementation simply polls all configured AccessDecisionVoters and grants access if any AccessDecisionVoter voted affirmatively. Denies access only if there was a deny vote AND no affirmative votes.

If every AccessDecisionVoter abstained from voting, the decision will be based on the isAllowIfAllAbstainDecisions() property (defaults to false).

Parameters
authentication the caller invoking the method
object the secured object
configAttributes the configuration attributes associated with the method being invoked
Throws
AccessDeniedException if access is denied