public class

WebExpressionVoter

extends Object
implements AccessDecisionVoter<S>
java.lang.Object
   ↳ org.springframework.security.web.access.expression.WebExpressionVoter

Class Overview

Voter which handles web authorisation decisions.

Summary

[Expand]
Inherited Constants
From interface org.springframework.security.access.AccessDecisionVoter
Public Constructors
WebExpressionVoter()
Public Methods
void setExpressionHandler(SecurityExpressionHandler<FilterInvocation> expressionHandler)
boolean supports(Class<?> clazz)
Indicates whether the AccessDecisionVoter implementation is able to provide access control votes for the indicated secured object type.
boolean supports(ConfigAttribute attribute)
Indicates whether this AccessDecisionVoter is able to vote on the passed ConfigAttribute.
int vote(Authentication authentication, FilterInvocation fi, Collection<ConfigAttribute> attributes)
[Expand]
Inherited Methods
From class java.lang.Object
From interface org.springframework.security.access.AccessDecisionVoter

Public Constructors

public WebExpressionVoter ()

Public Methods

public void setExpressionHandler (SecurityExpressionHandler<FilterInvocation> expressionHandler)

public boolean supports (Class<?> clazz)

Indicates whether the AccessDecisionVoter implementation is able to provide access control votes for the indicated secured object type.

Parameters
clazz the class that is being queried
Returns
  • true if the implementation can process the indicated class

public boolean supports (ConfigAttribute attribute)

Indicates whether this AccessDecisionVoter is able to vote on the passed ConfigAttribute.

This allows the AbstractSecurityInterceptor to check every configuration attribute can be consumed by the configured AccessDecisionManager and/or RunAsManager and/or AfterInvocationManager.

Parameters
attribute a configuration attribute that has been configured against the AbstractSecurityInterceptor
Returns
  • true if this AccessDecisionVoter can support the passed configuration attribute

public int vote (Authentication authentication, FilterInvocation fi, Collection<ConfigAttribute> attributes)