Cwikius-Spring/spring-security
1
0
Fork 0
mirror of https://github.com/spring-projects/spring-security.git synced 2025-07-06 02:32:14 +00:00
Code Issues Packages Projects Releases Wiki Activity

Note arrays can now be filtered by BasicAclEntryAfterInvocationCollectionFilteringProvider.

Browse Source
This commit is contained in:
Ben Alex 2004-12-17 22:06:45 +00:00
parent c5ea35d093
commit 67d642cfeb
1 changed files with 12 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

27
doc/docbook/index.xml
View File

@ -210,8 +210,7 @@
<para><mediaobject> <para><mediaobject>
<imageobject role="html"> <imageobject role="html">
<imagedata align="center" <imagedata align="center" fileref="SecurityInterception.gif"
fileref="SecurityInterception.gif"
format="GIF" /> format="GIF" />
</imageobject> </imageobject>
@ -362,8 +361,7 @@
<para><mediaobject> <para><mediaobject>
<imageobject role="html"> <imageobject role="html">
<imagedata align="center" fileref="Context.gif" <imagedata align="center" fileref="Context.gif" format="GIF" />
format="GIF" />
</imageobject> </imageobject>
<caption> <caption>
@ -1710,8 +1708,7 @@ public boolean supports(Class clazz);</programlisting></para>
<para><mediaobject> <para><mediaobject>
<imageobject role="html"> <imageobject role="html">
<imagedata align="center" <imagedata align="center" fileref="AccessDecisionVoting.gif"
fileref="AccessDecisionVoting.gif"
format="GIF" /> format="GIF" />
</imageobject> </imageobject>
@ -2111,10 +2108,10 @@ public boolean supports(Class clazz);</programlisting></para>
<para>Similar to the <para>Similar to the
<literal>BasicAclEntryAfterInvocationProvider</literal> is <literal>BasicAclEntryAfterInvocationProvider</literal> is
<literal>BasicAclEntryAfterInvocationCollectionFilteringProvider</literal>. <literal>BasicAclEntryAfterInvocationCollectionFilteringProvider</literal>.
It is designed to remove <literal>Collection</literal> elements for It is designed to remove <literal>Collection</literal> or array
which a principal does not have access. It never thrown an elements for which a principal does not have access. It never thrown
<literal>AccessDeniedException</literal> - simply silently removes the an <literal>AccessDeniedException</literal> - simply silently removes
offending elements. The provider is configured as follows:</para> the offending elements. The provider is configured as follows:</para>
<para><programlisting>&lt;bean id="afterAclCollectionRead" class="net.sf.acegisecurity.afterinvocation.BasicAclEntryAfterInvocationCollectionFilteringProvider"&gt; <para><programlisting>&lt;bean id="afterAclCollectionRead" class="net.sf.acegisecurity.afterinvocation.BasicAclEntryAfterInvocationCollectionFilteringProvider"&gt;
&lt;property name="aclManager"&gt;&lt;ref local="aclManager"/&gt;&lt;/property&gt; &lt;property name="aclManager"&gt;&lt;ref local="aclManager"/&gt;&lt;/property&gt;
@ -2127,9 +2124,10 @@ public boolean supports(Class clazz);</programlisting></para>
&lt;/bean&gt;</programlisting></para> &lt;/bean&gt;</programlisting></para>
<para>As you can imagine, the returned <literal>Object</literal> must <para>As you can imagine, the returned <literal>Object</literal> must
be a <literal>Collection</literal> for this provider to operate. It be a <literal>Collection</literal> or array for this provider to
will remove any element if the <literal>AclManager</literal> indicates operate. It will remove any element if the
the <literal>Authentication</literal> does not hold one of the listed <literal>AclManager</literal> indicates the
<literal>Authentication</literal> does not hold one of the listed
<literal>requirePermission</literal>s.</para> <literal>requirePermission</literal>s.</para>
<para>The Contacts sample application demonstrates these two <para>The Contacts sample application demonstrates these two
@ -3801,8 +3799,7 @@ $CATALINA_HOME/bin/startup.sh</programlisting></para>
<para><mediaobject> <para><mediaobject>
<imageobject role="html"> <imageobject role="html">
<imagedata align="center" fileref="ACLSecurity.gif" <imagedata align="center" fileref="ACLSecurity.gif" format="GIF" />
format="GIF" />
</imageobject> </imageobject>
<caption> <caption>