Java AccessDecisionVoter类代码示例

import org.springframework.security.access.AccessDecisionVoter; //导入依赖的package包/类
@SuppressWarnings("unchecked")
public void decide(Authentication authentication, Object object,Collection<ConfigAttribute> configAttributes)throws AccessDeniedException, InsufficientAuthenticationException {
	if((authentication.getPrincipal() instanceof IUser)){
		IUser loginUser=(IUser)authentication.getPrincipal();
		if(loginUser.isAdministrator())return;			
	}
	int result=10;
	for (AccessDecisionVoter<Object> voter : getDecisionVoters()) {
		result = voter.vote(authentication, object, configAttributes);
		if(result==AccessDecisionVoter.ACCESS_ABSTAIN){
			continue;
		}
		if(result==AccessDecisionVoter.ACCESS_DENIED){
			throw new AccessDeniedException("Access is denied");
		}
		if(result==AccessDecisionVoter.ACCESS_GRANTED){
			break;
		}
	}
	if(result==AccessDecisionVoter.ACCESS_ABSTAIN && configAttributes.size()>0){
		throw new AccessDeniedException("Access is denied");
	}
}
 

import org.springframework.security.access.AccessDecisionVoter; //导入依赖的package包/类
public boolean decide(Authentication authentication,Collection<ConfigAttribute> configAttributes){
	if((authentication.getPrincipal() instanceof IUser)){
		IUser loginUser=(IUser)authentication.getPrincipal();
		if(loginUser.isAdministrator())return true;			
	}
	int result=10;
	for (AccessDecisionVoter<Object> voter : decisionVoters) {
		result = voter.vote(authentication,null, configAttributes);
		if(result==AccessDecisionVoter.ACCESS_ABSTAIN){
			continue;
		}
		if(result==AccessDecisionVoter.ACCESS_DENIED){
			return false;
		}
		if(result==AccessDecisionVoter.ACCESS_GRANTED){
			break;
		}
	}
	if(result==AccessDecisionVoter.ACCESS_ABSTAIN && configAttributes.size()>0){
		return false;
	}else{
		return true;
	}
}
 

import org.springframework.security.access.AccessDecisionVoter; //导入依赖的package包/类
/**
 * Ensures that a user who has all the properties is granted ACCESS_GRANTED
 */
@Test
public void userHasProperties()
{

	final Map<String, String> properties = CollectionUtil.newMap();
	properties.put("USERNAME", "username");
	properties.put("PASSWORD", "password");
	userDetails.setProperties(properties);

	final int decision = decisionVoter.vote(token, this,
			CollectionUtil.<ConfigAttribute> newList());

	assertThat(new Integer(decision), is(new Integer(
			AccessDecisionVoter.ACCESS_GRANTED)));

}
 

import org.springframework.security.access.AccessDecisionVoter; //导入依赖的package包/类
@Override
protected void configureUrlAuthorization(
		ExpressionUrlAuthorizationConfigurer<HttpSecurity>.ExpressionInterceptUrlRegistry expressionInterceptUrlRegistry)
{
	@SuppressWarnings("rawtypes")
	List<AccessDecisionVoter> listOfVoters = new ArrayList<AccessDecisionVoter>();
	listOfVoters.add(new WebExpressionVoter());
	listOfVoters.add(new MolgenisAccessDecisionVoter());
	expressionInterceptUrlRegistry.accessDecisionManager(new AffirmativeBased(listOfVoters));

	expressionInterceptUrlRegistry.antMatchers("/").permitAll()
	// DAS datasource uses the database, unauthenticated users can
	// not see any data
			.antMatchers("/das/**").permitAll()

			.antMatchers("/myDas/**").permitAll()

			.antMatchers("/annotators/**").authenticated()

			.antMatchers("/charts/**").authenticated();
}
 

import org.springframework.security.access.AccessDecisionVoter; //导入依赖的package包/类
@Bean
public AccessDecisionManager accessDecisionManager() {
    List<AccessDecisionVoter<? extends Object>> decisionVoters = new ArrayList<>();
    decisionVoters.add(new RoleVoter());
    decisionVoters.add(new AuthenticatedVoter());
    decisionVoters.add(webExpressionVoter());
    return new AffirmativeBased(decisionVoters);
}
 

import org.springframework.security.access.AccessDecisionVoter; //导入依赖的package包/类
@Description("ConsensusBased AccessDecisionManager for Authorization voting")
    @Bean
    public AccessDecisionManager accessDecisionManager(
            CustomWebSecurityExpressionHandler customWebSecurityExpressionHandler) {
        List<AccessDecisionVoter<? extends Object>> decisionVoters
                = Arrays.asList(
//                new AuthenticatedVoter(),
//                new RoleVoter(),
                new WebExpressionVoter(){{
                    setExpressionHandler(customWebSecurityExpressionHandler);
                }}
        );
        return new ConsensusBased(decisionVoters);
    }
 

import org.springframework.security.access.AccessDecisionVoter; //导入依赖的package包/类
public AccessDecisionManager accessDecisionManager2(
        CustomWebSecurityExpressionHandler customWebSecurityExpressionHandler) {
    List<AccessDecisionVoter<? extends Object>> decisionVoters
            = Arrays.asList(
            new AuthenticatedVoter(),
            new RoleVoter(),
            new WebExpressionVoter(){{
                setExpressionHandler(customWebSecurityExpressionHandler);
            }}
    );
    return new UnanimousBased(decisionVoters);
}
 

import org.springframework.security.access.AccessDecisionVoter; //导入依赖的package包/类
@Description("AccessDecisionManager for Authorization voting")
@Bean
public AccessDecisionManager accessDecisionManager(
        CustomWebSecurityExpressionHandler customWebSecurityExpressionHandler) {
    List<AccessDecisionVoter<? extends Object>> decisionVoters
            = Arrays.asList(
            new WebExpressionVoter(){{
                setExpressionHandler(customWebSecurityExpressionHandler);
            }}
    );
    return new ConsensusBased(decisionVoters);
}
 

import org.springframework.security.access.AccessDecisionVoter; //导入依赖的package包/类
@Description("ConsensusBased AccessDecisionManager for Authorization voting")
@Bean
public AccessDecisionManager accessDecisionManager(
        CustomWebSecurityExpressionHandler customWebSecurityExpressionHandler) {
    List<AccessDecisionVoter<? extends Object>> decisionVoters
            = Arrays.asList(
            new WebExpressionVoter(){{
                setExpressionHandler(customWebSecurityExpressionHandler);
            }}
    );
    return new ConsensusBased(decisionVoters);
}
 

import org.springframework.security.access.AccessDecisionVoter; //导入依赖的package包/类
@Bean
public AccessDecisionManager shellAccessDecisionManager() {
	List<AccessDecisionVoter<?>> voters = new ArrayList<AccessDecisionVoter<?>>();
	RoleVoter voter = new RoleVoter();
	voter.setRolePrefix("");
	voters.add(voter);
	return new UnanimousBased(voters);
}
 

import org.springframework.security.access.AccessDecisionVoter; //导入依赖的package包/类
private void checkUrlAccessExpression() {
   log.debug("check if URL access expressions are allowed");
   String[] names = context.getBeanDefinitionNames();
   for (String name : names) {
      if (context.getBean(name) instanceof AbstractAccessDecisionManager) {
         for (AccessDecisionVoter v : ((AbstractAccessDecisionManager) context.getBean(name)).getDecisionVoters()) {
            if (v instanceof WebExpressionVoter) {
               log.debug("parse urlAccess as EL expression");
               urlAccessExpression = true;
               return;
            }
         }
      }
   }

   log.debug("parse urlAccess as simple expression");
   urlAccessExpression = false;
}
 

import org.springframework.security.access.AccessDecisionVoter; //导入依赖的package包/类
@Bean
public FilterSecurityInterceptor filterInvocationInterceptor(){
    List<AccessDecisionVoter> vote = new ArrayList<AccessDecisionVoter>(Arrays.asList(new WebExpressionVoter()));
    AffirmativeBased voters = new AffirmativeBased(vote);
    voters.setAllowIfAllAbstainDecisions(false);
    FilterSecurityInterceptor bean = new FilterSecurityInterceptor();
    bean.setAuthenticationManager(authenticationManager());
    bean.setAccessDecisionManager(voters);
    bean.setSecurityMetadataSource(securityMetadataSource);
    bean.setMessageSource(messageSource);
    return bean;
}
 

import org.springframework.security.access.AccessDecisionVoter; //导入依赖的package包/类
/**
 * Overridden to remove role prefix for the role voter. The application does not require any other access decision voters in the default configuration.
 */
/*
 * rawtypes must be suppressed because AffirmativeBased constructor takes in a raw typed list of AccessDecisionVoters
 */
@SuppressWarnings("rawtypes")
@Override
protected AccessDecisionManager accessDecisionManager()
{
    List<AccessDecisionVoter<?>> decisionVoters = new ArrayList<>();
    RoleVoter decisionVoter = new RoleVoter();
    decisionVoter.setRolePrefix("");
    decisionVoters.add(decisionVoter);
    return new AffirmativeBased(decisionVoters);
}
 

import org.springframework.security.access.AccessDecisionVoter; //导入依赖的package包/类
/***
 * 对应的方法决策器
 */
@Override
protected AccessDecisionManager accessDecisionManager() {
	AccessDecisionManager decisionManager = super.accessDecisionManager();
	@SuppressWarnings("unchecked")
	List<AccessDecisionVoter<? extends Object>> decisionVoters = (List<AccessDecisionVoter<? extends Object>>)ReflectUtils.getFieldValue(decisionManager, "decisionVoters");
	decisionVoters.add(new MethodWebExpressionVoter());
	return decisionManager;
}
 

import org.springframework.security.access.AccessDecisionVoter; //导入依赖的package包/类
/**
 * Gets the affirmative based.
 *
 * @return the affirmative based
 */
@Bean(name = "httpRequestAccessDecisionManager")
public AffirmativeBased getAffirmativeBased() {
  List<AccessDecisionVoter<? extends Object>> decisionVoters = new ArrayList<>();
  decisionVoters.add(getRoleVoter());

  AffirmativeBased based = new AffirmativeBased(decisionVoters);
  based.setAllowIfAllAbstainDecisions(false);
  return based;
}