Java AccessDecisionManager類代碼示例

import org.springframework.security.access.AccessDecisionManager; //導入依賴的package包/類
protected Guard createSecurityGuard() {
	ApplicationContext context = getApplicationContext();
	AccessDecisionManager accessDecisionManager = context.getBean(AccessDecisionManager.class);
	WebInvocationPrivilegeEvaluator invocationPrivilegeEvaluator = context
			.getBean(WebInvocationPrivilegeEvaluator.class);
	if (accessDecisionManager == null || invocationPrivilegeEvaluator == null) {
		return null;
	}
	SpringSecurityGuard springSecurityGuard = new SpringSecurityGuard();
	springSecurityGuard.setApplicationContext(context);
	springSecurityGuard.setAccessDecisionManager(accessDecisionManager);
	springSecurityGuard.setInvocationPrivilegeEvaluator(invocationPrivilegeEvaluator);
	try {
		springSecurityGuard.afterPropertiesSet();
	} catch (Exception e) {
		throw new RuntimeException("Error initialization security Guard", e);
	}
	return springSecurityGuard;

}
 

import org.springframework.security.access.AccessDecisionManager; //導入依賴的package包/類
@Bean
public AccessDecisionManager accessDecisionManager() {
    List<AccessDecisionVoter<? extends Object>> decisionVoters = new ArrayList<>();
    decisionVoters.add(new RoleVoter());
    decisionVoters.add(new AuthenticatedVoter());
    decisionVoters.add(webExpressionVoter());
    return new AffirmativeBased(decisionVoters);
}
 

import org.springframework.security.access.AccessDecisionManager; //導入依賴的package包/類
@Description("ConsensusBased AccessDecisionManager for Authorization voting")
    @Bean
    public AccessDecisionManager accessDecisionManager(
            CustomWebSecurityExpressionHandler customWebSecurityExpressionHandler) {
        List<AccessDecisionVoter<? extends Object>> decisionVoters
                = Arrays.asList(
//                new AuthenticatedVoter(),
//                new RoleVoter(),
                new WebExpressionVoter(){{
                    setExpressionHandler(customWebSecurityExpressionHandler);
                }}
        );
        return new ConsensusBased(decisionVoters);
    }
 

import org.springframework.security.access.AccessDecisionManager; //導入依賴的package包/類
public AccessDecisionManager accessDecisionManager2(
        CustomWebSecurityExpressionHandler customWebSecurityExpressionHandler) {
    List<AccessDecisionVoter<? extends Object>> decisionVoters
            = Arrays.asList(
            new AuthenticatedVoter(),
            new RoleVoter(),
            new WebExpressionVoter(){{
                setExpressionHandler(customWebSecurityExpressionHandler);
            }}
    );
    return new UnanimousBased(decisionVoters);
}
 

import org.springframework.security.access.AccessDecisionManager; //導入依賴的package包/類
@Description("AccessDecisionManager for Authorization voting")
@Bean
public AccessDecisionManager accessDecisionManager(
        CustomWebSecurityExpressionHandler customWebSecurityExpressionHandler) {
    List<AccessDecisionVoter<? extends Object>> decisionVoters
            = Arrays.asList(
            new WebExpressionVoter(){{
                setExpressionHandler(customWebSecurityExpressionHandler);
            }}
    );
    return new ConsensusBased(decisionVoters);
}
 

import org.springframework.security.access.AccessDecisionManager; //導入依賴的package包/類
@Description("ConsensusBased AccessDecisionManager for Authorization voting")
@Bean
public AccessDecisionManager accessDecisionManager(
        CustomWebSecurityExpressionHandler customWebSecurityExpressionHandler) {
    List<AccessDecisionVoter<? extends Object>> decisionVoters
            = Arrays.asList(
            new WebExpressionVoter(){{
                setExpressionHandler(customWebSecurityExpressionHandler);
            }}
    );
    return new ConsensusBased(decisionVoters);
}
 

import org.springframework.security.access.AccessDecisionManager; //導入依賴的package包/類
@Bean
public AccessDecisionManager shellAccessDecisionManager() {
	List<AccessDecisionVoter<?>> voters = new ArrayList<AccessDecisionVoter<?>>();
	RoleVoter voter = new RoleVoter();
	voter.setRolePrefix("");
	voters.add(voter);
	return new UnanimousBased(voters);
}
 

import org.springframework.security.access.AccessDecisionManager; //導入依賴的package包/類
@Bean
public AccessDecisionManager accessDecisionManager() {
  if (properties.isSecurityEnabled() && sessionService() != null) {
    Map<String, String> authorisationDetails = new HashMap<>();
    authorisationDetails.put("configloader/progress", environment.getProperty("c2mon.web.rbac.admin"));
    // Allow show charts without login
    authorisationDetails.put("commandviewer", environment.getProperty("c2mon.web.rbac.user"));

    log.info("Using RbacDecisionManager");
    return new RbacDecisionManager(sessionService(), authorisationDetails);
  }

  log.info("Using DefaultAccessDecisionManager");
  return new DefaultAccessDecisionManager();
}
 

import org.springframework.security.access.AccessDecisionManager; //導入依賴的package包/類
@Autowired
public UsersStorage(KvMapperFactory mapperFactory, AccessDecisionManager accessDecisionManager) {
    this.adm = accessDecisionManager;
    String prefix = KvUtils.join(mapperFactory.getStorage().getPrefix(), "users");
    this.map = KvMap.builder(UserRegistration.class, ExtendedUserDetailsImpl.class)
      .mapper(mapperFactory)
      .path(prefix)
      .passDirty(true)
      .adapter(new KvMapAdapterImpl())
      .build();
}
 

import org.springframework.security.access.AccessDecisionManager; //導入依賴的package包/類
@Override
public boolean supports( ConfigAttribute configAttribute )
{
    for ( AccessDecisionManager accessDecisionManager : accessDecisionManagers )
    {
        if ( accessDecisionManager.supports( configAttribute ) )
        {
            return true;
        }
    }

    return false;
}
 

import org.springframework.security.access.AccessDecisionManager; //導入依賴的package包/類
/**
 * Overridden to remove role prefix for the role voter. The application does not require any other access decision voters in the default configuration.
 */
/*
 * rawtypes must be suppressed because AffirmativeBased constructor takes in a raw typed list of AccessDecisionVoters
 */
@SuppressWarnings("rawtypes")
@Override
protected AccessDecisionManager accessDecisionManager()
{
    List<AccessDecisionVoter<?>> decisionVoters = new ArrayList<>();
    RoleVoter decisionVoter = new RoleVoter();
    decisionVoter.setRolePrefix("");
    decisionVoters.add(decisionVoter);
    return new AffirmativeBased(decisionVoters);
}
 

import org.springframework.security.access.AccessDecisionManager; //導入依賴的package包/類
public MockedSecurityInterceptor() {
    this.setAuthenticationManager(authentication -> null);

    AccessDecisionManager accessDecisionManager = mock(AccessDecisionManager.class);
    doReturn(true).when(accessDecisionManager).supports(any(Class.class));
    this.setAccessDecisionManager(accessDecisionManager);

    FilterInvocationSecurityMetadataSource filterInvocationSecurityMetadataSource =
        mock(FilterInvocationSecurityMetadataSource.class);
    doReturn(true).when(filterInvocationSecurityMetadataSource).supports(any(Class.class));
    this.setSecurityMetadataSource(filterInvocationSecurityMetadataSource);
}
 

import org.springframework.security.access.AccessDecisionManager; //導入依賴的package包/類
@Override
protected AccessDecisionManager accessDecisionManager() {
    final SpringSecurityPolicyEnforcer policyEnforcer = (SpringSecurityPolicyEnforcer)servletContext.getAttribute(SpringSecurityPolicyEnforcer.SPRING_SECURITY_POLICY_ATTRIBUTE);
    if (policyEnforcer == null) {
        throw new IllegalStateException("Spring policy enforcer wasn't initialized.");
    }
    
    return new PieAccessDecisionManager(policyEnforcer);
}
 

import org.springframework.security.access.AccessDecisionManager; //導入依賴的package包/類
@Bean
//	@Order(SecurityProperties.ACCESS_OVERRIDE_ORDER)
//	@ConditionalOnMissingBean(WebSecurityConfigurerAdapter.class)
	@Autowired
	public DefaultUrlSecurityConfigurer defaultSecurityConfigurer(AccessDecisionManager accessDecisionManager){
		return new DefaultUrlSecurityConfigurer(accessDecisionManager);
	}
 

import org.springframework.security.access.AccessDecisionManager; //導入依賴的package包/類
/***
 * 對應的方法決策器
 */
@Override
protected AccessDecisionManager accessDecisionManager() {
	AccessDecisionManager decisionManager = super.accessDecisionManager();
	@SuppressWarnings("unchecked")
	List<AccessDecisionVoter<? extends Object>> decisionVoters = (List<AccessDecisionVoter<? extends Object>>)ReflectUtils.getFieldValue(decisionManager, "decisionVoters");
	decisionVoters.add(new MethodWebExpressionVoter());
	return decisionManager;
}