Examples of org.acegisecurity.InsufficientAuthenticationException

org.acegisecurity.InsufficientAuthenticationException
Thrown if an authentication request is rejected because the credentials are not sufficiently trusted.
{ {@link org.acegisecurity.vote.AccessDecisionVoter}s will typically throw this exception if they are dissatisfied with the level of the authentication, such as if performed using a remember-me mechanism or anonymously. The commonly used {@link org.acegisecurity.ui.ExceptionTranslationFilter} will thus cause the AuthenticationEntryPointto be called, allowing the principal to authenticate with a stronger level of authentication.}
@author Ben Alex @version $Id: InsufficientAuthenticationException.java 1496 2006-05-23 13:38:33Z benalex $

    public static AcegiSecurityException unauthorizedAccess(String resourceName) {
        // not hide, and not filtering out a list, this
        // is an unauthorized direct resource access, complain
        Authentication user = user();
        if (user == null || user.getAuthorities().length == 0)
            return new InsufficientAuthenticationException("Cannot access "
                    + resourceName + " as anonymous");
        else
            return new AccessDeniedException("Cannot access "
                    + resourceName + " with the current privileges");
    }

View Full Code Here

    public static AcegiSecurityException unauthorizedAccess() {
        // not hide, and not filtering out a list, this
        // is an unauthorized direct resource access, complain
        Authentication user = user();
        if (user == null || user.getAuthorities().length == 0)
            return new InsufficientAuthenticationException("Operation unallowed with the current privileges");
        else
            return new AccessDeniedException("Operation unallowed with the current privileges");
    }

View Full Code Here

            // user is authenticated and has one of the required roles
            if(!allowedRoles.contains(ServiceAccessRule.ANY) && !allowedRoles.isEmpty()) {
                Authentication user = SecurityContextHolder.getContext().getAuthentication();
                
                if (user == null || user.getAuthorities().length == 0)
                    throw new InsufficientAuthenticationException("Cannot access "
                            + service + "." + method + " as anonymous");
                
                boolean roleFound = false;
                for (GrantedAuthority role : user.getAuthorities()) {
                    if(allowedRoles.contains(role.getAuthority())) {

View Full Code Here

        if (logger.isDebugEnabled()) {
          logger.debug("Access is denied (user is anonymous); redirecting to authentication entry point",
              exception);
        }


        sendStartAuthentication(request, response, chain, new InsufficientAuthenticationException(
            "Full authentication is required to access this resource"));
      }
      else {
        if (logger.isDebugEnabled()) {
          logger.debug("Access is denied (user is not anonymous); delegating to AccessDeniedHandler",

View Full Code Here

                    logger.debug("Access is denied (user is anonymous); redirecting to authentication entry point",
                        accessDenied);
                }


                sendStartAuthentication(request, response, chain,
                    new InsufficientAuthenticationException(
                        "Full authentication is required to access this resource"));
            } else {
                if (logger.isDebugEnabled()) {
                    logger.debug("Access is denied (user is not anonymous); sending back forbidden response",
                        accessDenied);

View Full Code Here

TOP

Related Classes of org.acegisecurity.InsufficientAuthenticationException

org.acegisecurity.ui.ExceptionTranslationFilter

org.geoserver.security.OperationSecurityCallback

org.geoserver.security.SecureCatalogImpl

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.