Package org.springframework.security.access

Examples of org.springframework.security.access.ConfigAttribute

54
55
56
57
58
59
60
61
62
63
64
      for (Resources resource : resources) {
        Collection<ConfigAttribute> configAttributes = new ArrayList<ConfigAttribute>();
        // TODO:ZZQ 通过资源名称来表示具体的权限 注意：必须"ROLE_"开头
        // 关联代码：applicationContext-security.xml
        // 关联代码：com.huaxin.security.MyUserDetailServiceImpl#obtionGrantedAuthorities
        ConfigAttribute configAttribute = new SecurityConfig("ROLE_" + resource.getResKey());
        configAttributes.add(configAttribute);
        resourceMap.put(resource.getResUrl(), configAttributes);
      }
    }
  }
View Full Code Here
36
37
38
39
40
41
42
43
44
45
46
47
48
      return;
    }
    //所请求的资源拥有的权限(一个资源对多个权限)
    Iterator<ConfigAttribute> iterator = configAttributes.iterator();
    while(iterator.hasNext()) {
      ConfigAttribute configAttribute = iterator.next();
      //访问所请求资源所需要的权限
      String needPermission = configAttribute.getAttribute();
      //System.out.println("needPermission is " + needPermission);
      //用户所拥有的权限authentication
      for(GrantedAuthority ga : authentication.getAuthorities()) {
        if(needPermission.equals(ga.getAuthority())) {
          return;
View Full Code Here
71
72
73
74
75
76
77
78
79
80
        for(Map.Entry<MessageMatcher<?>,String> entry : matcherToExpression.entrySet()) {
            MessageMatcher<?> matcher = entry.getKey();
            String rawExpression = entry.getValue();
            Expression expression = handler.getExpressionParser().parseExpression(rawExpression);
            ConfigAttribute attribute = new MessageExpressionConfigAttribute(expression);
            matcherToAttrs.put(matcher, Arrays.asList(attribute));
        }
        return new DefaultMessageSecurityMetadataSource(matcherToAttrs);
    }
View Full Code Here
195
196
197
198
199
200
201
202
203
204
205
206
207
            if (failIfCalled) {
                fail("Should not have called this channel processor: " + configAttribute);
            }

            while (iter.hasNext()) {
                ConfigAttribute attr = (ConfigAttribute) iter.next();

                if (attr.getAttribute().equals(configAttribute)) {
                    invocation.getHttpResponse().sendRedirect("/redirected");

                    return;
                }
            }
View Full Code Here
36
37
38
39
40
41
42
43
44
45
46
    @Test
    public void returnsDelegateAttributes() throws Exception {
        List sources = new ArrayList();
        MethodSecurityMetadataSource delegate = mock(MethodSecurityMetadataSource.class);
        ConfigAttribute ca = mock(ConfigAttribute.class);
        List attributes = Arrays.asList(ca);
        Method toString = String.class.getMethod("toString");
        when(delegate.getAttributes(toString, String.class)).thenReturn(attributes);
        sources.add(delegate);
        mds = new DelegatingMethodSecurityMetadataSource(sources);
View Full Code Here
65
66
67
68
69
70
71
72
73
74
75
        DenyAgainVoter denyVoter = new DenyAgainVoter();
        list.add(voter);
        list.add(denyVoter);
        mock.setDecisionVoters(list);

        ConfigAttribute attr = new SecurityConfig("DENY_AGAIN_FOR_SURE");
        assertTrue(mock.supports(attr));

        ConfigAttribute badAttr = new SecurityConfig("WE_DONT_SUPPORT_THIS");
        assertTrue(!mock.supports(badAttr));
    }
View Full Code Here
47
48
49
50
51
52
53
54
55
56
57
    public int vote(Authentication authentication, Object object, Collection<ConfigAttribute> attributes) {
        Iterator<ConfigAttribute> iter = attributes.iterator();

        while (iter.hasNext()) {
            ConfigAttribute attribute = iter.next();

            if (this.supports(attribute)) {
                return ACCESS_DENIED;
            }
        }
View Full Code Here
51
52
53
54
55
56
57
58
59
60
61
    public int vote(Authentication authentication, Object object, Collection<ConfigAttribute> attributes) {
        Iterator<ConfigAttribute> iter = attributes.iterator();

        while (iter.hasNext()) {
            ConfigAttribute attribute = iter.next();

            if (this.supports(attribute)) {
                return ACCESS_DENIED;
            }
        }
View Full Code Here
79
80
81
82
83
84
85
86
87
        when(matcher1.matches(message)).thenReturn(true);

        Collection<ConfigAttribute> attrs = source.getAttributes(message);

        assertThat(attrs.size()).isEqualTo(1);
        ConfigAttribute attr = attrs.iterator().next();
        assertThat(attr).isInstanceOf(MessageExpressionConfigAttribute.class);
        assertThat(((MessageExpressionConfigAttribute)attr).getAuthorizeExpression().getValue(rootObject)).isEqualTo(true);
    }
View Full Code Here
91
92
93
94
95
96
97
98
99
        when(matcher2.matches(message)).thenReturn(true);

        Collection<ConfigAttribute> attrs = source.getAttributes(message);

        assertThat(attrs.size()).isEqualTo(1);
        ConfigAttribute attr = attrs.iterator().next();
        assertThat(attr).isInstanceOf(MessageExpressionConfigAttribute.class);
        assertThat(((MessageExpressionConfigAttribute)attr).getAuthorizeExpression().getValue(rootObject)).isEqualTo(false);
    }
View Full Code Here
TOP

Related Classes of org.springframework.security.access.ConfigAttribute

  • com.iisigroup.cap.security.vote.CapPermissionVoter
  • com.lanyuan.security.MyAccessDecisionManager
  • com.lanyuan.security.MySecurityMetadataSource
  • com.loc.security.MyAccssDecisionManager
  • com.loc.security.MySecurityMetadataSource
  • com.pe.pgn.clubpgn.security.MyAccessDecisionManager
  • com.pe.pgn.clubpgn.security.MyInvocationSecurityMetadataSourceService
  • org.springframework.security.access.method.DelegatingMethodSecurityMetadataSourceTests
  • org.springframework.security.access.vote.AbstractAccessDecisionManagerTests
  • org.springframework.security.access.vote.DenyAgainVoter
    • Copyright © 2018 www.massapicom. All rights reserved.
    All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.