Package org.apache.shiro.web.filter.authz

package org.apache.shiro.web.filter.authz

Servlet Filter implementations that perform authorization (access control) checks based on the Subject's abilities (for example, role or permission checks).

Related Packages

Package	Description
org.apache.shiro.web.filter	Base package supporting all Servlet Filter implementations used to control access to web pages and URL resources.
org.apache.shiro.web.filter.authc	Servlet Filter implementations specific to controlling access based on a subject's authentication status, or those that can execute authentications (log-ins) directly.
org.apache.shiro.web.filter.mgt	The filter 'mgt' (management) package contains components used in managing Filters that are available for filter chain construction, the filter chains themselves, as well as resolving filter chains based by name.
org.apache.shiro.web.filter.session	Concepts used to represent Shiro's aggregate state in an application.

Class	Description
AuthorizationFilter	Superclass for authorization-related filters.
HostFilter	A Filter that can allow or deny access based on the host that sent the request.
HttpMethodPermissionFilter	A filter that translates an HTTP Request's Method (e.g.
IpAddressMatcher	Matches a request based on IP Address or subnet mask matching against the remote address.
IpFilter	A Filter that requires the request to be from within a specific set of IP address ranges and / or not from with a specific (denied) set.
IpSource	Represents a source of information for IP restrictions (see IpFilter)
PermissionsAuthorizationFilter	Filter that allows access if the current user has the permissions specified by the mapped value, or denies access if the user does not have all of the permissions specified.
PortFilter	A Filter that requires the request to be on a specific port, and if not, redirects to the same URL on that port.
RolesAuthorizationFilter	Filter that allows access if the current user has the roles specified by the mapped value, or denies access if the user does not have all of the roles specified.
SslFilter	Filter which requires a request to be over SSL.