mirror of
https://github.com/spring-projects/spring-security.git
synced 2025-07-09 03:52:48 +00:00
SEC-1086: AccessDecisionManager implementations now log debug messages giving the results returned by each voter polled.
This commit is contained in:
parent
d163cd7d18
commit
a0f3015ac6
@ -18,6 +18,8 @@ package org.springframework.security.vote;
|
|||||||
import java.util.Iterator;
|
import java.util.Iterator;
|
||||||
import java.util.List;
|
import java.util.List;
|
||||||
|
|
||||||
|
import org.apache.commons.logging.Log;
|
||||||
|
import org.apache.commons.logging.LogFactory;
|
||||||
import org.springframework.security.AccessDecisionManager;
|
import org.springframework.security.AccessDecisionManager;
|
||||||
import org.springframework.security.AccessDeniedException;
|
import org.springframework.security.AccessDeniedException;
|
||||||
import org.springframework.security.SpringSecurityMessageSource;
|
import org.springframework.security.SpringSecurityMessageSource;
|
||||||
@ -39,6 +41,7 @@ import org.springframework.util.Assert;
|
|||||||
public abstract class AbstractAccessDecisionManager implements AccessDecisionManager, InitializingBean,
|
public abstract class AbstractAccessDecisionManager implements AccessDecisionManager, InitializingBean,
|
||||||
MessageSourceAware {
|
MessageSourceAware {
|
||||||
//~ Instance fields ================================================================================================
|
//~ Instance fields ================================================================================================
|
||||||
|
protected final Log logger = LogFactory.getLog(getClass());
|
||||||
|
|
||||||
private List<AccessDecisionVoter> decisionVoters;
|
private List<AccessDecisionVoter> decisionVoters;
|
||||||
|
|
||||||
|
@ -48,6 +48,10 @@ public class AffirmativeBased extends AbstractAccessDecisionManager {
|
|||||||
for (AccessDecisionVoter voter : getDecisionVoters()) {
|
for (AccessDecisionVoter voter : getDecisionVoters()) {
|
||||||
int result = voter.vote(authentication, object, configAttributes);
|
int result = voter.vote(authentication, object, configAttributes);
|
||||||
|
|
||||||
|
if (logger.isDebugEnabled()) {
|
||||||
|
logger.debug("Voter: " + voter + ", returned: " + result);
|
||||||
|
}
|
||||||
|
|
||||||
switch (result) {
|
switch (result) {
|
||||||
case AccessDecisionVoter.ACCESS_GRANTED:
|
case AccessDecisionVoter.ACCESS_GRANTED:
|
||||||
return;
|
return;
|
||||||
|
@ -60,6 +60,10 @@ public class ConsensusBased extends AbstractAccessDecisionManager {
|
|||||||
for (AccessDecisionVoter voter : getDecisionVoters()) {
|
for (AccessDecisionVoter voter : getDecisionVoters()) {
|
||||||
int result = voter.vote(authentication, object, configAttributes);
|
int result = voter.vote(authentication, object, configAttributes);
|
||||||
|
|
||||||
|
if (logger.isDebugEnabled()) {
|
||||||
|
logger.debug("Voter: " + voter + ", returned: " + result);
|
||||||
|
}
|
||||||
|
|
||||||
switch (result) {
|
switch (result) {
|
||||||
case AccessDecisionVoter.ACCESS_GRANTED:
|
case AccessDecisionVoter.ACCESS_GRANTED:
|
||||||
grant++;
|
grant++;
|
||||||
|
@ -62,6 +62,10 @@ public class UnanimousBased extends AbstractAccessDecisionManager {
|
|||||||
for(AccessDecisionVoter voter : getDecisionVoters()) {
|
for(AccessDecisionVoter voter : getDecisionVoters()) {
|
||||||
int result = voter.vote(authentication, object, singleAttributeList);
|
int result = voter.vote(authentication, object, singleAttributeList);
|
||||||
|
|
||||||
|
if (logger.isDebugEnabled()) {
|
||||||
|
logger.debug("Voter: " + voter + ", returned: " + result);
|
||||||
|
}
|
||||||
|
|
||||||
switch (result) {
|
switch (result) {
|
||||||
case AccessDecisionVoter.ACCESS_GRANTED:
|
case AccessDecisionVoter.ACCESS_GRANTED:
|
||||||
grant++;
|
grant++;
|
||||||
|
Loading…
x
Reference in New Issue
Block a user