com.naturalprogrammer.spring.lemon.security

Class LemonPermissionEvaluator

java.lang.Object

com.naturalprogrammer.spring.lemon.security.LemonPermissionEvaluator

All Implemented Interfaces:

org.springframework.aop.framework.AopInfrastructureBean, org.springframework.security.access.PermissionEvaluator

public class LemonPermissionEvaluator
extends java.lang.Object
implements org.springframework.security.access.PermissionEvaluator

Needed to check the permission for the service methods annotated with @PreAuthorize("hasPermission(...

Author:

Sanjay Patel

Constructor Summary

Constructors

Constructor and Description
LemonPermissionEvaluator()

Method Summary

Modifier and Type	Method and Description
boolean	hasPermission(org.springframework.security.core.Authentication auth, java.lang.Object targetDomainObject, java.lang.Object permission) Called by Spring Security to evaluate the permission
boolean	hasPermission(org.springframework.security.core.Authentication authentication, java.io.Serializable targetId, java.lang.String targetType, java.lang.Object permission) We need to override this method as well.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

LemonPermissionEvaluator

public LemonPermissionEvaluator()

Method Detail

hasPermission

public boolean hasPermission(org.springframework.security.core.Authentication auth,
                             java.lang.Object targetDomainObject,
                             java.lang.Object permission)

Called by Spring Security to evaluate the permission

Specified by:

hasPermission in interface org.springframework.security.access.PermissionEvaluator

Parameters:

auth - Spring Security authentication object, from which the current-user can be found

targetDomainObject - Object for which permission is being checked

permission - What permission is being checked for, e.g. 'edit'

hasPermission

public boolean hasPermission(org.springframework.security.core.Authentication authentication,
                             java.io.Serializable targetId,
                             java.lang.String targetType,
                             java.lang.Object permission)

We need to override this method as well. To keep things simple, Let's not use this, throwing exception is someone uses it.

Specified by:

hasPermission in interface org.springframework.security.access.PermissionEvaluator