public class

AclAuthorizationStrategyImpl

extends Object
implements AclAuthorizationStrategy
java.lang.Object
   ↳ org.springframework.security.acls.domain.AclAuthorizationStrategyImpl

Class Overview

Default implementation of AclAuthorizationStrategy.

Permission will be granted provided the current principal is either the owner (as defined by the ACL), has ADMINISTRATION (as defined by the ACL and via a Sid retrieved for the current principal via #sidRetrievalStrategy), or if the current principal holds the relevant system-wide GrantedAuthority and injected into the constructor.

Summary

[Expand]
Inherited Constants
From interface org.springframework.security.acls.domain.AclAuthorizationStrategy
Public Constructors
AclAuthorizationStrategyImpl(GrantedAuthority... auths)
Constructor.
Public Methods
void securityCheck(Acl acl, int changeType)
void setSidRetrievalStrategy(SidRetrievalStrategy sidRetrievalStrategy)
[Expand]
Inherited Methods
From class java.lang.Object
From interface org.springframework.security.acls.domain.AclAuthorizationStrategy

Public Constructors

public AclAuthorizationStrategyImpl (GrantedAuthority... auths)

Constructor. The only mandatory parameter relates to the system-wide GrantedAuthority instances that can be held to always permit ACL changes.

Parameters
auths the GrantedAuthoritys that have special permissions (index 0 is the authority needed to change ownership, index 1 is the authority needed to modify auditing details, index 2 is the authority needed to change other ACL and ACE details) (required)

Alternatively, a single value can be supplied for all three permissions.

Public Methods

public void securityCheck (Acl acl, int changeType)

public void setSidRetrievalStrategy (SidRetrievalStrategy sidRetrievalStrategy)