org.openmrs.annotation

Class AuthorizedAnnotationAttributes

java.lang.Object

org.openmrs.annotation.AuthorizedAnnotationAttributes

public class AuthorizedAnnotationAttributes
extends Object

Annotation attributes metadata implementation used for authorization method interception.

This Attributes implementation will return security configuration for classes described using the Secured Java 5 annotation.

The SecurityAnnotationAttributes implementation can be used to configure a MethodDefinitionAttributes and MethodSecurityInterceptor bean definition (see below).

For example:

 <bean id="attributes" 
     class="org.acegisecurity.annotation.SecurityAnnotationAttributes"/>
 
 <bean id="objectDefinitionSource" 
     class="org.acegisecurity.intercept.method.MethodDefinitionAttributes">
     <property name="attributes">
         <ref local="attributes"/>
     </property>
 </bean>
 
 <bean id="securityInterceptor" 
     class="org.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor">
      . . .
      <property name="objectDefinitionSource">
          <ref local="objectDefinitionSource"/>
      </property>
 </bean>
 

These security annotations are similar to the Commons Attributes approach, however they are using Java 5 language-level metadata support.

See Also:

Authorized

Constructor Summary

Constructors

Constructor and Description
AuthorizedAnnotationAttributes()

Method Summary

Modifier and Type	Method and Description
Collection<String>	getAttributes(Class<?> target) Get the Secured attributes for a given target class.
Collection<?>	getAttributes(Class<?> clazz, Class<?> filter)
Collection<?>	getAttributes(Field field)
Collection<?>	getAttributes(Field field, Class<?> clazz)
Collection<String>	getAttributes(Method method) Get the Secured attributes for a given target method.
Collection<?>	getAttributes(Method method, Class<?> clazz)
boolean	getRequireAll(Class<?> target) Returns whether or not to require that the user have all of the privileges in order to be "authorized" for this class
boolean	getRequireAll(Method method) Returns whether or not to require that the user have all of the privileges in order to be "authorized" for this method
boolean	hasAuthorizedAnnotation(Method method) Determine if this method has the @Authorized annotation even on it

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AuthorizedAnnotationAttributes

public AuthorizedAnnotationAttributes()

Method Detail

getAttributes

public Collection<String> getAttributes(Class<?> target)

Get the Secured attributes for a given target class.

Parameters:

target - The target method

Returns:

Collection of SecurityConfig

getAttributes

public Collection<String> getAttributes(Method method)

Get the Secured attributes for a given target method.

Parameters:

method - The target method

Returns:

Collection of SecurityConfig

getRequireAll

public boolean getRequireAll(Class<?> target)

Returns whether or not to require that the user have all of the privileges in order to be "authorized" for this class

Parameters:

target - the class to act on

Returns:

boolean true/false whether to "and" privileges together

See Also:

Authorized.requireAll()

getRequireAll

public boolean getRequireAll(Method method)

Returns whether or not to require that the user have all of the privileges in order to be "authorized" for this method

Parameters:

method -

Returns:

boolean true/false whether to "and" privileges together

See Also:

Authorized.requireAll()

hasAuthorizedAnnotation

public boolean hasAuthorizedAnnotation(Method method)

Determine if this method has the @Authorized annotation even on it

Parameters:

method -

Returns:

boolean true/false whether this method is annotated for OpenMRS

getAttributes

public Collection<?> getAttributes(Class<?> clazz,
                                   Class<?> filter)

getAttributes

public Collection<?> getAttributes(Method method,
                                   Class<?> clazz)

getAttributes

public Collection<?> getAttributes(Field field)

getAttributes

public Collection<?> getAttributes(Field field,
                                   Class<?> clazz)