Package com.totvs.tjf.autoconfigure

Class MethodSecurityAutoConfiguration

java.lang.Object

org.springframework.security.config.annotation.method.configuration.GlobalMethodSecurityConfiguration

com.totvs.tjf.autoconfigure.MethodSecurityAutoConfiguration

All Implemented Interfaces:

org.springframework.beans.factory.Aware, org.springframework.beans.factory.BeanFactoryAware, org.springframework.beans.factory.SmartInitializingSingleton, org.springframework.context.annotation.ImportAware

@Primary
@Configuration
@EnableGlobalMethodSecurity(prePostEnabled=true,
                            securedEnabled=true,
                            jsr250Enabled=true)
public class MethodSecurityAutoConfiguration
extends org.springframework.security.config.annotation.method.configuration.GlobalMethodSecurityConfiguration

Enable global method security.

Customized the MethodSecurityExpressionHandler in default GlobalMethodSecurityConfiguration to use FeaturePermissionEvaluator that will check permissions on Resource Access Controller instance designated by security.access.api.permissions-uri property.

Author:

Marcos Paulo dos Santos

See Also:

CustomMethodSecurityExpressionHandler, FeaturePermissionEvaluator

Constructor Summary

Constructors

Constructor	Description
MethodSecurityAutoConfiguration()

Method Summary

Modifier and Type	Method	Description
protected org.springframework.security.access.expression.method.MethodSecurityExpressionHandler	createExpressionHandler()
HttpClientPermissionErrorExceptionHandler	securityHttpStatusCodeExceptionHandler()

Methods inherited from class org.springframework.security.config.annotation.method.configuration.GlobalMethodSecurityConfiguration

accessDecisionManager, afterInvocationManager, afterSingletonsInstantiated, authenticationManager, configure, customMethodSecurityMetadataSource, getExpressionHandler, methodSecurityInterceptor, methodSecurityMetadataSource, preInvocationAuthorizationAdvice, runAsManager, setBeanFactory, setImportMetadata, setMethodSecurityExpressionHandler, setObjectPostProcessor

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

MethodSecurityAutoConfiguration

public MethodSecurityAutoConfiguration()

Method Detail

createExpressionHandler

protected org.springframework.security.access.expression.method.MethodSecurityExpressionHandler createExpressionHandler()

Overrides:

createExpressionHandler in class org.springframework.security.config.annotation.method.configuration.GlobalMethodSecurityConfiguration

securityHttpStatusCodeExceptionHandler

@Bean
public HttpClientPermissionErrorExceptionHandler securityHttpStatusCodeExceptionHandler()