Class MethodSecurityInterceptor
java.lang.Object
org.springframework.security.access.intercept.AbstractSecurityInterceptor
org.springframework.security.access.intercept.aopalliance.MethodSecurityInterceptor
- All Implemented Interfaces:
org.aopalliance.aop.Advice
,org.aopalliance.intercept.Interceptor
,org.aopalliance.intercept.MethodInterceptor
,org.springframework.beans.factory.Aware
,org.springframework.beans.factory.InitializingBean
,org.springframework.context.ApplicationEventPublisherAware
,org.springframework.context.MessageSourceAware
- Direct Known Subclasses:
AspectJMethodSecurityInterceptor
@Deprecated
public class MethodSecurityInterceptor
extends AbstractSecurityInterceptor
implements org.aopalliance.intercept.MethodInterceptor
Deprecated.
Provides security interception of AOP Alliance based method invocations.
The SecurityMetadataSource
required by this security interceptor is of
type MethodSecurityMetadataSource
. This is shared with the AspectJ based
security interceptor (AspectJSecurityInterceptor
), since both work with
Java Method
s.
Refer to AbstractSecurityInterceptor
for details on the workflow.
-
Field Summary
Fields inherited from class org.springframework.security.access.intercept.AbstractSecurityInterceptor
logger, messages
-
Constructor Summary
-
Method Summary
Modifier and TypeMethodDescriptionClass<?>
Deprecated.Indicates the type of secure objects the subclass will be presenting to the abstract parent for processing.Deprecated.invoke
(org.aopalliance.intercept.MethodInvocation mi) Deprecated.This method should be used to enforce security on aMethodInvocation
.Deprecated.void
Deprecated.Methods inherited from class org.springframework.security.access.intercept.AbstractSecurityInterceptor
afterInvocation, afterPropertiesSet, beforeInvocation, finallyInvocation, getAccessDecisionManager, getAfterInvocationManager, getAuthenticationManager, getRunAsManager, isAlwaysReauthenticate, isRejectPublicInvocations, isValidateConfigAttributes, setAccessDecisionManager, setAfterInvocationManager, setAlwaysReauthenticate, setApplicationEventPublisher, setAuthenticationManager, setMessageSource, setPublishAuthorizationSuccess, setRejectPublicInvocations, setRunAsManager, setSecurityContextHolderStrategy, setValidateConfigAttributes
-
Constructor Details
-
MethodSecurityInterceptor
public MethodSecurityInterceptor()Deprecated.
-
-
Method Details
-
getSecureObjectClass
Deprecated.Description copied from class:AbstractSecurityInterceptor
Indicates the type of secure objects the subclass will be presenting to the abstract parent for processing. This is used to ensure collaborators wired to theAbstractSecurityInterceptor
all support the indicated secure object class.- Specified by:
getSecureObjectClass
in classAbstractSecurityInterceptor
- Returns:
- the type of secure object the subclass provides services for
-
invoke
Deprecated.This method should be used to enforce security on aMethodInvocation
.- Specified by:
invoke
in interfaceorg.aopalliance.intercept.MethodInterceptor
- Parameters:
mi
- The method being invoked which requires a security decision- Returns:
- The returned value from the method invocation (possibly modified by the
AfterInvocationManager
). - Throws:
Throwable
- if any error occurs
-
getSecurityMetadataSource
Deprecated. -
obtainSecurityMetadataSource
Deprecated.- Specified by:
obtainSecurityMetadataSource
in classAbstractSecurityInterceptor
-
setSecurityMetadataSource
Deprecated.
-
AuthorizationManagerBeforeMethodInterceptor
andAuthorizationManagerAfterMethodInterceptor
instead