public class

UnanimousBased

extends AbstractAccessDecisionManager
java.lang.Object
   ↳ org.springframework.security.access.vote.AbstractAccessDecisionManager
     ↳ org.springframework.security.access.vote.UnanimousBased

Class Overview

Simple concrete implementation of AccessDecisionManager that requires all voters to abstain or grant access.

Summary

[Expand]
Inherited Fields
From class org.springframework.security.access.vote.AbstractAccessDecisionManager
Public Constructors
UnanimousBased()
This constructor is deprecated. Use constructor which takes voter list
UnanimousBased(List<AccessDecisionVoter> decisionVoters)
Public Methods
void decide(Authentication authentication, Object object, Collection<ConfigAttribute> attributes)
This concrete implementation polls all configured AccessDecisionVoters for each ConfigAttribute and grants access if only grant (or abstain) votes were received.
[Expand]
Inherited Methods
From class org.springframework.security.access.vote.AbstractAccessDecisionManager
From class java.lang.Object
From interface org.springframework.beans.factory.InitializingBean
From interface org.springframework.context.MessageSourceAware
From interface org.springframework.security.access.AccessDecisionManager

Public Constructors

public UnanimousBased ()

This constructor is deprecated.
Use constructor which takes voter list

public UnanimousBased (List<AccessDecisionVoter> decisionVoters)

Public Methods

public void decide (Authentication authentication, Object object, Collection<ConfigAttribute> attributes)

This concrete implementation polls all configured AccessDecisionVoters for each ConfigAttribute and grants access if only grant (or abstain) votes were received.

Other voting implementations usually pass the entire list of ConfigAttributes to the AccessDecisionVoter. This implementation differs in that each AccessDecisionVoter knows only about a single ConfigAttribute at a time.

If every AccessDecisionVoter abstained from voting, the decision will be based on the isAllowIfAllAbstainDecisions() property (defaults to false).

Parameters
authentication the caller invoking the method
object the secured object
attributes the configuration attributes associated with the method being invoked
Throws
AccessDeniedException if access is denied