This concrete implementation simply polls all configured
AccessDecisionVoter s and upon
completion determines the consensus of granted vs denied responses. If there were an equal number of
grant and deny votes, the decision will be based on the
ConsensusBased.isAllowIfEqualGrantedDeniedDecisions() property (defaults to true).
If every AccessDecisionVoter abstained from voting, the decision will be based on the
ConsensusBased.isAllowIfAllAbstainDecisions() property (defaults to false).
Parameters: authentication - the caller invoking the method Parameters: object - the secured object Parameters: config - the configuration attributes associated with the method being invoked throws: AccessDeniedException - if access is denied |