public abstract class

AbstractAclProvider

extends Object
implements AfterInvocationProvider
java.lang.Object
   ↳ org.springframework.security.acls.afterinvocation.AbstractAclProvider
Known Direct Subclasses

Class Overview

Abstract AfterInvocationProvider which provides commonly-used ACL-related services.

Summary

Fields
protected final AclService aclService
protected ObjectIdentityRetrievalStrategy objectIdentityRetrievalStrategy
protected String processConfigAttribute
protected Class<?> processDomainObjectClass
protected final List<Permission> requirePermission
protected SidRetrievalStrategy sidRetrievalStrategy
Public Constructors
AbstractAclProvider(AclService aclService, String processConfigAttribute, List<Permission> requirePermission)
Public Methods
void setObjectIdentityRetrievalStrategy(ObjectIdentityRetrievalStrategy objectIdentityRetrievalStrategy)
void setProcessDomainObjectClass(Class<?> processDomainObjectClass)
void setSidRetrievalStrategy(SidRetrievalStrategy sidRetrievalStrategy)
boolean supports(Class<?> clazz)
This implementation supports any type of class, because it does not query the presented secure object.
boolean supports(ConfigAttribute attribute)
Indicates whether this AfterInvocationProvider is able to participate in a decision involving the passed ConfigAttribute.
Protected Methods
Class<?> getProcessDomainObjectClass()
boolean hasPermission(Authentication authentication, Object domainObject)
void setProcessConfigAttribute(String processConfigAttribute)
[Expand]
Inherited Methods
From class java.lang.Object
From interface org.springframework.security.access.AfterInvocationProvider

Fields

protected final AclService aclService

protected ObjectIdentityRetrievalStrategy objectIdentityRetrievalStrategy

protected String processConfigAttribute

protected Class<?> processDomainObjectClass

protected final List<Permission> requirePermission

protected SidRetrievalStrategy sidRetrievalStrategy

Public Constructors

public AbstractAclProvider (AclService aclService, String processConfigAttribute, List<Permission> requirePermission)

Public Methods

public void setObjectIdentityRetrievalStrategy (ObjectIdentityRetrievalStrategy objectIdentityRetrievalStrategy)

public void setProcessDomainObjectClass (Class<?> processDomainObjectClass)

public void setSidRetrievalStrategy (SidRetrievalStrategy sidRetrievalStrategy)

public boolean supports (Class<?> clazz)

This implementation supports any type of class, because it does not query the presented secure object.

Parameters
clazz the secure object
Returns
  • always true

public boolean supports (ConfigAttribute attribute)

Indicates whether this AfterInvocationProvider is able to participate in a decision involving the passed ConfigAttribute.

This allows the AbstractSecurityInterceptor to check every configuration attribute can be consumed by the configured AccessDecisionManager and/or RunAsManager and/or AccessDecisionManager.

Parameters
attribute a configuration attribute that has been configured against the AbstractSecurityInterceptor
Returns
  • true if this AfterInvocationProvider can support the passed configuration attribute

Protected Methods

protected Class<?> getProcessDomainObjectClass ()

protected boolean hasPermission (Authentication authentication, Object domainObject)

protected void setProcessConfigAttribute (String processConfigAttribute)