Package org.alfresco.module.org_alfresco_module_rm.security

Class RMMethodSecurityInterceptor

java.lang.Object
net.sf.acegisecurity.intercept.AbstractSecurityInterceptor
net.sf.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor
org.alfresco.repo.security.permissions.impl.acegi.MethodSecurityInterceptor
org.alfresco.module.org_alfresco_module_rm.security.RMMethodSecurityInterceptor
All Implemented Interfaces:
org.aopalliance.aop.Advice, org.aopalliance.intercept.Interceptor, org.aopalliance.intercept.MethodInterceptor, org.springframework.beans.factory.Aware, org.springframework.beans.factory.InitializingBean, org.springframework.context.ApplicationContextAware
public class RMMethodSecurityInterceptor extends MethodSecurityInterceptor
Records Management Method Security Interceptor.

Provides a way to record information about the capabilities being executed and report when an access denied exception is thrown.

Since:
2.2
Author:
Roy Wetherall

  • Field Summary

    Fields
    Modifier and Type
    Field
    Description
    protected static final org.apache.commons.logging.Log
    LOGGER
    logger

    Fields inherited from class net.sf.acegisecurity.intercept.AbstractSecurityInterceptor

    logger

  • Constructor Summary

    Constructors
    Constructor
    Description
    RMMethodSecurityInterceptor()
     

  • Method Summary

    Modifier and Type
    Method
    Description
    static void
    addMessage(String message)
    Add a message to be displayed in the error report.
    static void
    addMessage(String message, Object... params)
     
    protected net.sf.acegisecurity.intercept.InterceptorStatusToken
    beforeInvocation(Object object)
     
    String
    getFailureReport()
    Gets the failure report for the currently recorded capabilities.
    Object
    invoke(org.aopalliance.intercept.MethodInvocation mi)
     
    static void
    isRMSecurityChecked(boolean newValue)
    Indicates whether this is a RM security check or not
    static void
    reportCapabilityCondition(String name, String conditionName, boolean expected, boolean actual)
    Report capability condition.
    static void
    reportCapabilityStatus(String name, int status)
    Report capability status.

    Methods inherited from class org.alfresco.repo.security.permissions.impl.acegi.MethodSecurityInterceptor

    pre

    Methods inherited from class net.sf.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor

    getObjectDefinitionSource, getSecureObjectClass, obtainObjectDefinitionSource, setObjectDefinitionSource

    Methods inherited from class net.sf.acegisecurity.intercept.AbstractSecurityInterceptor

    afterInvocation, afterPropertiesSet, getAccessDecisionManager, getAfterInvocationManager, getAuthenticationManager, getRunAsManager, isValidateConfigAttributes, setAccessDecisionManager, setAfterInvocationManager, setApplicationContext, setAuthenticationManager, setRunAsManager, setValidateConfigAttributes

    Methods inherited from class java.lang.Object

    clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

  • Field Details

    • LOGGER

      protected static final org.apache.commons.logging.Log LOGGER
      logger

  • Constructor Details

    • RMMethodSecurityInterceptor

      public RMMethodSecurityInterceptor()

  • Method Details

    • isRMSecurityChecked

      public static void isRMSecurityChecked(boolean newValue)
      Indicates whether this is a RM security check or not
      Parameters:
      newValue - true if RM security check, false otherwise

    • addMessage

      public static void addMessage(String message)
      Add a message to be displayed in the error report.
      Parameters:
      message - error message

    • addMessage

      public static void addMessage(String message, Object... params)

    • reportCapabilityStatus

      public static void reportCapabilityStatus(String name, int status)
      Report capability status.
      Parameters:
      name - capability name
      status - capability status

    • reportCapabilityCondition

      public static void reportCapabilityCondition(String name, String conditionName, boolean expected, boolean actual)
      Report capability condition.
      Parameters:
      name - capability name
      conditionName - capability condition name
      expected - expected value
      actual - actual value

    • getFailureReport

      public String getFailureReport()
      Gets the failure report for the currently recorded capabilities.
      Returns:
      String capability error report

    • beforeInvocation

      protected net.sf.acegisecurity.intercept.InterceptorStatusToken beforeInvocation(Object object)
      Overrides:
      beforeInvocation in class net.sf.acegisecurity.intercept.AbstractSecurityInterceptor
      See Also:
      • AbstractSecurityInterceptor.beforeInvocation(java.lang.Object)

    • invoke

      public Object invoke(org.aopalliance.intercept.MethodInvocation mi) throws Throwable
      Specified by:
      invoke in interface org.aopalliance.intercept.MethodInterceptor
      Overrides:
      invoke in class net.sf.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor
      Throws:
      Throwable
      See Also:
      • MethodSecurityInterceptor.invoke(org.aopalliance.intercept.MethodInvocation)