com.addc.server.commons.security

Class DefaultAuthorizationProvider

java.lang.Object

com.addc.server.commons.security.DefaultAuthorizationProvider

All Implemented Interfaces:

AuthorizationProvider

public final class DefaultAuthorizationProvider
extends Object
implements AuthorizationProvider

The DefaultAuthorizationProvider supplies an AuthorizationProvider that will read an xml definition associating targets and operations with GrantedAuthoritys and will use this to check whether the current user has the authorization to invoke a given operation on a given target. The file must conform to the Authorization.xsd schema.

Constructor Summary

Constructors

Constructor and Description
DefaultAuthorizationProvider() Create new DefaultAuthorizationProvider with no definitions
DefaultAuthorizationProvider(String xmlFileName) Create new DefaultAuthorizationProvider

Method Summary

Methods

Modifier and Type	Method and Description
boolean	isAuthorized(org.springframework.security.core.Authentication authentication, String target, String operation) Query whether the given user is authorized to invoke the given operation on the given taget

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

DefaultAuthorizationProvider

public DefaultAuthorizationProvider()

Create new DefaultAuthorizationProvider with no definitions

DefaultAuthorizationProvider

public DefaultAuthorizationProvider(String xmlFileName)

Create new DefaultAuthorizationProvider

Parameters:

xmlFileName - The name of the xml file

Method Detail

isAuthorized

public boolean isAuthorized(org.springframework.security.core.Authentication authentication,
                   String target,
                   String operation)

Description copied from interface: AuthorizationProvider

Query whether the given user is authorized to invoke the given operation on the given taget

Specified by:

isAuthorized in interface AuthorizationProvider

Parameters:

authentication - The user

target - The target (IDL name or class name)

operation - The method name

Returns:

true if the authentication is authorized.