org.acegisecurity.intercept.method

This class will only detect those attributes which are defined for:

• The class-wide attributes defined for the intercepted class.
• The class-wide attributes defined for interfaces explicitly implemented by the intercepted class.
• The method-specific attributes defined for the intercepted method of the intercepted class.
• The method-specific attributes defined by any explicitly implemented interface if that interface contains a method signature matching that of the intercepted method.

Note that attributes defined against parent classes (either for their methods or interfaces) are not detected.

For consistency with MethodDefinitionAttributes as well as support for MethodDefinitionSourceAdvisor, this implementation will return a ConfigAttributeDefinition containing all configuration attributes defined against:

• The method-specific attributes defined for the intercepted method of the intercepted class.
• The method-specific attributes defined by any explicitly implemented interface if that interface contains a method signature matching that of the intercepted method.

In general you should therefore define the interface methods of your secure objects, not the implementations.

Of course, if an org.acegisecurity.AfterInvocationManager is used to authorize the result of a method invocation, this class cannot assist determine whether or not the AfterInvocationManager will enable access.