Examples of MethodInvocationPrivilegeEvaluator

org.springframework.security.access.intercept.MethodInvocationPrivilegeEvaluator
Allows users to determine whether they have "before invocation" privileges for a given method invocation.
Of course, if an {@link org.springframework.security.access.intercept.AfterInvocationManager} is used to authorize theresult of a method invocation, this class cannot assist determine whether or not the AfterInvocationManager will enable access. Instead this class aims to allow applications to determine whether or not the current principal would be allowed to at least attempt to invoke the method, irrespective of the "after" invocation handling.
@author Ben Alex

Examples of org.springframework.security.access.intercept.MethodInvocationPrivilegeEvaluator

    @Test
    public void allowsAccessUsingCreate() throws Exception {
        Object object = new TargetObject();
        final MethodInvocation mi = MethodInvocationUtils.create(object, "makeLowerCase", "foobar");


        MethodInvocationPrivilegeEvaluator mipe = new MethodInvocationPrivilegeEvaluator();
        when(mds.getAttributes(mi)).thenReturn(role);


        mipe.setSecurityInterceptor(interceptor);
        mipe.afterPropertiesSet();


        assertTrue(mipe.isAllowed(mi, token));
    }

View Full Code Here

Examples of org.springframework.security.access.intercept.MethodInvocationPrivilegeEvaluator


    @Test
    public void allowsAccessUsingCreateFromClass() throws Exception {
        final MethodInvocation mi = MethodInvocationUtils.createFromClass(new OtherTargetObject(), ITargetObject.class, "makeLowerCase",
                new Class[] {String.class}, new Object[] {"Hello world"});
        MethodInvocationPrivilegeEvaluator mipe = new MethodInvocationPrivilegeEvaluator();
        mipe.setSecurityInterceptor(interceptor);
        when(mds.getAttributes(mi)).thenReturn(role);


        assertTrue(mipe.isAllowed(mi, token));
    }

View Full Code Here

Examples of org.springframework.security.access.intercept.MethodInvocationPrivilegeEvaluator


    @Test
    public void declinesAccessUsingCreate() throws Exception {
        Object object = new TargetObject();
        final MethodInvocation mi = MethodInvocationUtils.create(object, "makeLowerCase", "foobar");
        MethodInvocationPrivilegeEvaluator mipe = new MethodInvocationPrivilegeEvaluator();
        mipe.setSecurityInterceptor(interceptor);
        when(mds.getAttributes(mi)).thenReturn(role);
        doThrow(new AccessDeniedException("rejected")).when(adm).decide(token, mi, role);


        assertFalse(mipe.isAllowed(mi, token));
    }

View Full Code Here

Examples of org.springframework.security.access.intercept.MethodInvocationPrivilegeEvaluator

    @Test
    public void declinesAccessUsingCreateFromClass() throws Exception {
        final MethodInvocation mi = MethodInvocationUtils.createFromClass(new OtherTargetObject(), ITargetObject.class, "makeLowerCase",
                new Class[] {String.class}, new Object[] {"helloWorld"});


        MethodInvocationPrivilegeEvaluator mipe = new MethodInvocationPrivilegeEvaluator();
        mipe.setSecurityInterceptor(interceptor);
        when(mds.getAttributes(mi)).thenReturn(role);
        doThrow(new AccessDeniedException("rejected")).when(adm).decide(token, mi, role);


        assertFalse(mipe.isAllowed(mi, token));
    }

View Full Code Here

TOP

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.