Cwikius-Spring
/
spring-security
mirror of https://github.com/spring-projects/spring-security.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Minor package info updates.

This commit is contained in:
Luke Taylor 2009-05-11 05:48:09 +00:00
parent 76438b3347
commit 03d39f1e88
1 changed files with 6 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
core/src/main/java/org/springframework/security/access/intercept/package.html
View File

@ -1,31 +1,26 @@
<html>
<body>
Actually enforces the security and ties the whole security system together.
<P>
<p>
A <i>secure object</i> is a term frequently used throughout the security
system. It does <b>not</b> refer to a business object that is being
secured, but instead refers to some infrastructure object that can have
security facilities provided for it by Spring Security.
For example, one secure object would be <code>MethodInvocation</code>,
whilst another would be HTTP
{@link org.springframwork.security.intercept.web.FilterInvocation}. Note these are
{@link org.springframework.security.web.FilterInvocation}. Note these are
infrastructure objects and their design allows them to represent a large
variety of actual resources that might need to be secured, such as business
objects or HTTP request URLs.
</p>
<P>Each secure object typically has its
own <code>org.springframwork.security.intercept</code> package.
<p>Each secure object typically has its
own interceptor package.
Each package usually includes a concrete security interceptor (which
subclasses {@link org.springframework.security.access.intercept.AbstractSecurityInterceptor},
an appropriate {@link org.springframework.security.access.intercept.ObjectDefinitionSource}
an appropriate {@link org.springframework.security.access.SecurityMetadataSource}
for the type of resources the secure object represents, and a property editor
to populate the <code>ObjectDefinitionSource</code>.
<P>It is simple to create new secure object types, given the
<code>AbstractSecurityInterceptor</code> provides the majority of the logic
and other specialised packages provide the authentication, authorization,
run-as replacement management and <code>ContextHolder</code> population.
to populate the <code>SecurityMetadataSource</code>.
</body>
</html>