org.duracloud.security.vote
Class AccessDecisionManagerImpl

java.lang.Object
  org.springframework.security.vote.AbstractAccessDecisionManager
      org.duracloud.security.vote.AccessDecisionManagerImpl

All Implemented Interfaces:

org.springframework.beans.factory.InitializingBean, org.springframework.context.MessageSourceAware, org.springframework.security.AccessDecisionManager

public class AccessDecisionManagerImpl
extends org.springframework.security.vote.AbstractAccessDecisionManager

This class polls its internal list of AccessDecisionVoters to come to an AuthZ decision for the principal (authentication) and resource.

Author:

Andrew Woods Date: Mar 12, 2010

Field Summary

Fields inherited from class org.springframework.security.vote.AbstractAccessDecisionManager

messages

Constructor Summary

AccessDecisionManagerImpl()

Method Summary

void	decide(org.springframework.security.Authentication authentication, java.lang.Object resource, org.springframework.security.ConfigAttributeDefinition config) This method implements to AccessDecisionManager interface.

Methods inherited from class org.springframework.security.vote.AbstractAccessDecisionManager

afterPropertiesSet, checkAllowIfAllAbstainDecisions, getDecisionVoters, isAllowIfAllAbstainDecisions, setAllowIfAllAbstainDecisions, setDecisionVoters, setMessageSource, supports, supports

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AccessDecisionManagerImpl

public AccessDecisionManagerImpl()

Method Detail

decide

public void decide(org.springframework.security.Authentication authentication,
                   java.lang.Object resource,
                   org.springframework.security.ConfigAttributeDefinition config)
            throws org.springframework.security.AccessDeniedException

 This method implements to AccessDecisionManager interface.
 Each voter in the internal list of AccessDecisionVoters is presented with
 all of the configAttributes for the arg resource.
 - If all voters abstain from voting, the decision goes to the default
     setting: allowIfAllAbstainDecisions
 - If no voter denies the AuthZ vote and at least one voter grants, then
   AuthZ is granted.
 

Parameters:

authentication - principal seeking AuthZ

resource - that is under protection

config - access-attributes defined on resource

Throws:

org.springframework.security.AccessDeniedException - if AuthZ denied