|
Votes if any
ConfigAttribute.getAttribute starts with a prefix
indicating that it is a role. The default prefix string is ROLE_,
but this may be overriden to any value. It may also be set to empty, which
means that essentially any attribute will be voted on. As described further
below, the effect of an empty prefix may not be quite desireable.
Abstains from voting if no configuration attribute commences with the role
prefix. Votes to grant access if there is an exact matching
org.acegisecurity.GrantedAuthority to a ConfigAttribute
starting with the role prefix. Votes to deny access if there is no exact
matching GrantedAuthority to a ConfigAttribute
starting with the role prefix.
An empty role prefix means that the voter will vote for every
ConfigAttribute. When there are different categories of ConfigAttributes
used, this will not be optimal since the voter will be voting for attributes
which do not represent roles. However, this option may be of some use when
using preexisting role names without a prefix, and no ability exists to
prefix them with a role prefix on reading them in, such as provided for
example in
org.acegisecurity.userdetails.jdbc.JdbcDaoImpl .
All comparisons and prefixes are case sensitive.
author:
Ben Alex
author:
colin sampaleanu
version:
$Id: RoleVoter.java 1948 2007-08-25 00:15:30Z benalex $ | 