Java Doc for LabelBasedAclVoter.java in  » Security » acegi-security » org » acegisecurity » vote » Java Source Code / Java DocumentationJava Source Code and Java Documentation

This Acl voter will evaluate methods based on labels applied to incoming arguments. It will only check methods that have been properly tagged in the MethodSecurityInterceptor with the value stored in attributeIndicatingLabeledOperation. If a method has been tagged, then it examines each argument, and if the argument implements LabeledData , then it will asses if the user's list of granted authorities matches.

By default, if none of the arguments are labeled, then the access will be granted. This can be overridden by setting allowAccessIfNoAttributesAreLabeled to false in the Spring context file.

In many situations, different values are linked together to define a common label, it is necessary to define a map in the application context that links user-assigned label access to domain object labels. This is done by setting up the labelMap in the application context.

Default value: true, users can run such methods.

 <bean id="accessDecisionManager" class="org.acegisecurity.vote.UnanimousBased">
 <property name="allowIfAllAbstainDecisions"><value>false</value></property>
 <property name="decisionVoters">
 <list>
 <bean class="org.acegisecurity.vote.RoleVoter"/>
 <bean class="org.acegisecurity.vote.LabelBasedAclVoter">
 <property name="attributeIndicatingLabeledOperation">
 <value>LABELED_OPERATION</value>
 </property>
 <property name="labelMap">
 <map>
 <entry key="DATA_LABEL_BLUE">
 <list>
 <value>blue</value>
 <value>indigo</value>
 <value>purple</value>
 </list>
 </entry>
 <entry key="LABEL_ORANGE">
 <list>
 <value>orange</value>
 <value>sunshine</value>
 <value>amber</value>
 </list>
 </entry>
 <entry key="LABEL_ADMIN">
 <list>
 <value>blue</value>
 <value>indigo</value>
 <value>purple</value>
 <value>orange</value>
 <value>sunshine</value>
 <value>amber</value>
 </list>
 </entry>
 </map>
 </property>
 </bean>
 </list>
 </property>
 </bean>