Package org.springframework.security.access

Examples of org.springframework.security.access.AccessDeniedException

60
61
62
63
64
65
66
67
68
69
70
   
    @Test
    public void testHandleAccessDeniedException() {
        Principal principal = createMock(Principal.class);               
        request.setUserPrincipal(principal);
        AccessDeniedException ade = new AccessDeniedException("error");       
       
        expect(principal.getName()).andReturn("theuser");
        replay(principal);       
        abstractRestApiImpl.handleAccessDeniedException(ade, request, response);       
        assertThat(response.getStatus(), is(HttpStatus.FORBIDDEN.value()));  
View Full Code Here
58
59
60
61
62
63
64
65
    UsernamePasswordAuthenticationToken authentication = (UsernamePasswordAuthenticationToken)message.getHeaders().get(SimpMessageHeaderAccessor.USER_HEADER);
    String destination = (String)message.getHeaders().get(SimpMessageHeaderAccessor.DESTINATION_HEADER);
    if((destination == null) || isAllowed(destination, authentication.getName())) {
      return message;
    }
    throw new AccessDeniedException("Message to destination " + destination + " not allowed for user " + authentication.getName());

  }
View Full Code Here
44
45
46
47
48
49
50
51
52
53
54
        .getAttribute(WebAttributes.AUTHENTICATION_EXCEPTION) : null;
    String errmsg = "";
    if (ae != null) {
      errmsg = ae.getMessage();
    } else {
      AccessDeniedException accessDenied = (AccessDeniedException) request
          .getAttribute(WebAttributes.ACCESS_DENIED_403);
      if (accessDenied != null) {
        errmsg = CapAppContext.getMessage("AccessCheck.AccessDenied",
            locale) + errmsg;
      }
View Full Code Here
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
        grant++;

        break;

      case AccessDecisionVoter.ACCESS_DENIED:
        throw new AccessDeniedException(messages.getMessage(
            "AbstractAccessDecisionManager.accessDenied",
            "Access is denied"));

      default:
        abstain++;

        break;
      }
    }

    // To get this far, there were no deny votes
    if (grant > 0) {
      return;
    } else if (abstain > 0) {
      throw new AccessDeniedException(messages.getMessage(
          "AbstractAccessDecisionManager.accessDenied",
          "Access is denied"));
    }

  }// ;
View Full Code Here
76
77
78
79
80
81
82
83
84
85
86
            if (isAdd(request) || request.getParameter("id") != null) {
                response.sendError(HttpServletResponse.SC_FORBIDDEN);
                log.warn("User '" + request.getRemoteUser() + "' is trying to edit user with id '" +
                         request.getParameter("id") + "'");

                throw new AccessDeniedException("You do not have permission to modify other users.");
            }
        }

        if (!isFormSubmission(request)) {
            String userId = request.getParameter("id");
View Full Code Here
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
            if (!signupUser) {
                User currentUser = getCurrentUser(auth);

                if (user.getId() != null && !user.getId().equals(currentUser.getId()) && !administrator) {
                    log.warn("Access Denied: '" + currentUser.getUsername() + "' tried to modify '" + user.getUsername() + "'!");
                    throw new AccessDeniedException(ACCESS_DENIED);
                } else if (user.getId() != null && user.getId().equals(currentUser.getId()) && !administrator) {
                    // get the list of roles the user is trying add
                    Set<String> userRoles = new HashSet<String>();
                    if (user.getRoles() != null) {
                        for (Object o : user.getRoles()) {
                            Role role = (Role) o;
                            userRoles.add(role.getName());
                        }
                    }

                    // get the list of roles the user currently has
                    Set<String> authorizedRoles = new HashSet<String>();
                    for (GrantedAuthority role : roles) {
                        authorizedRoles.add(role.getAuthority());
                    }

                    // if they don't match - access denied
                    // regular users aren't allowed to change their roles
                    if (!CollectionUtils.isEqualCollection(userRoles, authorizedRoles)) {
                        log.warn("Access Denied: '" + currentUser.getUsername() + "' tried to change their role(s)!");
                        throw new AccessDeniedException(ACCESS_DENIED);
                    }
                }
            } else {
                if (log.isDebugEnabled()) {
                    log.debug("Registering new user '" + user.getUsername() + "'");
View Full Code Here
136
137
138
139
140
141
142
143
144
        if (auth.getPrincipal() instanceof UserDetails) {
            currentUser = (User) auth.getPrincipal();
        } else if (auth.getDetails() instanceof UserDetails) {
            currentUser = (User) auth.getDetails();
        } else {
            throw new AccessDeniedException("User not properly authenticated.");
        }
        return currentUser;
    }
View Full Code Here
60
61
62
63
64
65
66
                return;
              }
            }

          }
          throw new AccessDeniedException("Acceso Denegado ("+object+")");
        }
View Full Code Here
49
50
51
52
53
54
55
56
  @Test
  public void testAuthenticationSuccess() {
    this.listener.onApplicationEvent(new AuthorizationFailureEvent(this, Arrays
        .<ConfigAttribute> asList(new SecurityConfig("USER")),
        new UsernamePasswordAuthenticationToken("user", "password"),
        new AccessDeniedException("Bad user")));
    verify(this.publisher).publishEvent((ApplicationEvent) anyObject());
  }
View Full Code Here
87
88
89
90
91
92
93
94
95
96
  private void checkResourceOwner(String user, Principal principal) {
    if (principal instanceof OAuth2Authentication) {
      OAuth2Authentication authentication = (OAuth2Authentication) principal;
      if (!authentication.isClientOnly() && !user.equals(principal.getName())) {
        throw new AccessDeniedException(String.format("User '%s' cannot obtain tokens for user '%s'",
            principal.getName(), user));
      }
    }
  }
View Full Code Here
TOP

Related Classes of org.springframework.security.access.AccessDeniedException

  • com.es.app.eliteSystemSOUI
  • com.gcrm.security.UrlAccessDecisionManager
  • com.gcrm.util.security.UserUtil
  • com.iisigroup.cap.mvc.action.PageAction
  • com.iisigroup.cap.security.vote.ConditionsUnanimousBased
  • com.infoclinika.mssharing.web.security.RichUser
  • com.lanyuan.security.MyAccessDecisionManager
  • com.loc.security.MyAccssDecisionManager
  • com.narirelays.ems.j2ee.filters.IPRoleAuthenticationFilter
  • com.pe.pgn.clubpgn.security.MyAccessDecisionManager
    • Copyright © 2018 www.massapicom. All rights reserved.
    All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.