org.acegisecurity.acl.basic

It should be noted that AclObjectIdentity instances are created in various locations throughout the package.

Domain objects must implement this interface if they wish to provide an AclObjectIdentity rather than it being determined by relying classes.

Implementations should provide appropriate methods to set their cache parameters (eg time-to-live) and/or force removal of entities before their normal expiration.

This implementation will provide ACL lookup services for any object that it can determine the AclObjectIdentity for by calling the BasicAclProvider.obtainIdentity(Object) method.

Implementations will vary depending on their ability to interpret the "recipient" object types contained in BasicAclEntry instances, and how those recipient object types correspond to Authentication-presented principals and granted authorities.

Implementations should not filter the resulting ACL list from lower-order permissions.

This implementation does not need to understand the "recipient" types presented in a BasicAclEntry because it merely delegates to the detected Authentication.getPrincipal or Authentication.getAuthorities .

Uses Strings to store the identity of the domain object instance.