org.springframework.richclient.security
Interface SecurityController

Show UML class diagram

All Superinterfaces:

AuthenticationAware

All Known Implementing Classes:

AbstractSecurityController, UserRoleSecurityController

public interface SecurityController
extends AuthenticationAware

A security controller is responsible for authorizing other Authorizable objects. Based on the current authentication and the configured access decision rules, the controlled objects will have their Authorizable.setAuthorized(boolean) method called accordingly.

The access decision manager is responsible for making the decision to authorize the controlled objects.

Author:

Larry Streepy

Method Summary

void	addControlledObject(Authorizable object) Add an object to our controlled set.
org.springframework.security.AccessDecisionManager	getAccessDecisionManager() Get the access decision manager in use
Object	removeControlledObject(Authorizable object) Remove an object from our controlled set.
void	setAccessDecisionManager(org.springframework.security.AccessDecisionManager accessDecisionManager) Set the access decision manager to use
void	setControlledObjects(List secured) Set the objects that are to be controlled.

Methods inherited from interface org.springframework.richclient.security.AuthenticationAware

setAuthenticationToken

Method Detail

setAccessDecisionManager

void setAccessDecisionManager(org.springframework.security.AccessDecisionManager accessDecisionManager)

Set the access decision manager to use

Parameters:

accessDecisionManager -

getAccessDecisionManager

org.springframework.security.AccessDecisionManager getAccessDecisionManager()

Get the access decision manager in use

Returns:

decision manager

setControlledObjects

void setControlledObjects(List secured)

Set the objects that are to be controlled. Only beans that implement the Authorized interface are processed.

Parameters:

secured - List of objects to control

addControlledObject

void addControlledObject(Authorizable object)

Add an object to our controlled set.

Parameters:

object - to control

removeControlledObject

Object removeControlledObject(Authorizable object)

Remove an object from our controlled set.

Parameters:

object - to remove

Returns:

object removed or null if not found