Determines the ACLs that are effective for a given
Authentication object.
Implementations will vary depending on their ability to interpret the
"recipient" object types contained in
BasicAclEntry instances, and
how those recipient object types correspond to
Authentication-presented principals and granted authorities.
Implementations should not filter the resulting ACL list from lower-order
permissions. So if a resulting ACL list grants a "read" permission, an
"unlimited" permission and a "zero" permission (due to the effective ACLs
for different granted authorities held by the Authentication
object), all three permissions would be returned as distinct
BasicAclEntry instances. It is the responsibility of the
relying classes (voters and business methods) to ignore or handle
lower-order permissions in a business logic dependent manner.
author:
Ben Alex
version:
$Id: EffectiveAclsResolver.java 1784 2007-02-24 21:00:24Z luke_t $ |