org.springframework.security.access.vote

Class AffirmativeBased

java.lang.Object

org.springframework.security.access.vote.AbstractAccessDecisionManager

org.springframework.security.access.vote.AffirmativeBased

All Implemented Interfaces:

org.springframework.beans.factory.Aware, org.springframework.beans.factory.InitializingBean, org.springframework.context.MessageSourceAware, AccessDecisionManager

public class AffirmativeBased
extends AbstractAccessDecisionManager

Simple concrete implementation of AccessDecisionManager that grants access if any AccessDecisionVoter returns an affirmative response.

Field Summary

Fields inherited from class org.springframework.security.access.vote.AbstractAccessDecisionManager

logger, messages

Constructor Summary

Constructors

Constructor and Description
AffirmativeBased(java.util.List<AccessDecisionVoter<? extends java.lang.Object>> decisionVoters)

Method Summary

Modifier and Type	Method and Description
void	decide(Authentication authentication, java.lang.Object object, java.util.Collection<ConfigAttribute> configAttributes) This concrete implementation simply polls all configured AccessDecisionVoters and grants access if any AccessDecisionVoter voted affirmatively.

Methods inherited from class org.springframework.security.access.vote.AbstractAccessDecisionManager

afterPropertiesSet, checkAllowIfAllAbstainDecisions, getDecisionVoters, isAllowIfAllAbstainDecisions, setAllowIfAllAbstainDecisions, setMessageSource, supports, supports

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AffirmativeBased

public AffirmativeBased(java.util.List<AccessDecisionVoter<? extends java.lang.Object>> decisionVoters)

Method Detail

decide

public void decide(Authentication authentication,
                   java.lang.Object object,
                   java.util.Collection<ConfigAttribute> configAttributes)
            throws AccessDeniedException

This concrete implementation simply polls all configured AccessDecisionVoters and grants access if any AccessDecisionVoter voted affirmatively. Denies access only if there was a deny vote AND no affirmative votes.

If every AccessDecisionVoter abstained from voting, the decision will be based on the AbstractAccessDecisionManager.isAllowIfAllAbstainDecisions() property (defaults to false).

Parameters:

authentication - the caller invoking the method

object - the secured object

configAttributes - the configuration attributes associated with the method being invoked

Throws:

AccessDeniedException - if access is denied