org.springframework.security.access.vote.AffirmativeBased Java Examples

private ObjectPostProcessor<AffirmativeBased> createRoleProcessor() {
    return new ObjectPostProcessor<>() {
        @Override
        public AffirmativeBased postProcess(AffirmativeBased affirmativeBased) {
            WebExpressionVoter webExpressionVoter = new WebExpressionVoter();
            DefaultWebSecurityExpressionHandler expressionHandler = new DefaultWebSecurityExpressionHandler();
            expressionHandler.setRoleHierarchy(authorities -> {
                String[] allAlertRoles = retrieveAllowedRoles();
                return AuthorityUtils.createAuthorityList(allAlertRoles);
            });
            webExpressionVoter.setExpressionHandler(expressionHandler);
            affirmativeBased.getDecisionVoters().add(webExpressionVoter);
            return affirmativeBased;
        }
    };
}
 

@Override
public AccessDecisionManager accessDecisionManager() {

    List<AccessDecisionVoter<? extends Object>> decisionVoters =
            new ArrayList<AccessDecisionVoter<? extends Object>>();

    decisionVoters.add(jvueMethodAclVoter);// 启用自定义投票器
    decisionVoters.add(new RoleVoter());
    decisionVoters.add(new AuthenticatedVoter());

    return new AffirmativeBased(decisionVoters);
}
 

@Override
        public <O extends FilterSecurityInterceptor> O postProcess(O fsi) {
            fsi.setSecurityMetadataSource(new ExpressionFilterInvocationSecurityMetadataSource(fsi.getSecurityMetadataSource(), resourceEntityMapper));
            AffirmativeBased affirmativeBased = (AffirmativeBased) fsi.getAccessDecisionManager();
            affirmativeBased.getDecisionVoters().add(new ExpressionVoter());
///            affirmativeBased.getDecisionVoters().add(new RoleVoter());
            return fsi;
        }
 

@Bean
public AccessDecisionManager accessDecisionManager() {
    List<AccessDecisionVoter<? extends Object>> decisionVoters = new ArrayList<>();
    decisionVoters.add(new RoleVoter());
    decisionVoters.add(new AuthenticatedVoter());
    decisionVoters.add(webExpressionVoter());
    return new AffirmativeBased(decisionVoters);
}
 

/**
 * Overridden to remove role prefix for the role voter. The application does not require any other access decision voters in the default configuration.
 */
/*
 * rawtypes must be suppressed because AffirmativeBased constructor takes in a raw typed list of AccessDecisionVoters
 */
@SuppressWarnings("rawtypes")
@Override
protected AccessDecisionManager accessDecisionManager()
{
    List<AccessDecisionVoter<?>> decisionVoters = new ArrayList<>();
    RoleVoter decisionVoter = new RoleVoter();
    decisionVoter.setRolePrefix("");
    decisionVoters.add(decisionVoter);
    return new AffirmativeBased(decisionVoters);
}
 

public void login(String userName, String password,
		ApplicationContext context) throws Exception {
	// [1] Create AUTH Token
	Authentication token = new UsernamePasswordAuthenticationToken(
			userName, password);

	// [2] Authenticate User
	AuthenticationManager am = (AuthenticationManager) context
			.getBean(AUTH_MANAGER_BEAN_NAME);
	token = am.authenticate(token);

	// [3] Check User Access
	AffirmativeBased accessDecisionManager = (AffirmativeBased) context
			.getBean(ACCESS_DECISION_MANAGER_BEAN_NAME);
	Collection<ConfigAttribute> list = new ArrayList<ConfigAttribute>();
	SecurityConfig config = new SecurityConfig(RangerConstants.ROLE_SYS_ADMIN);
	list.add(config);
	accessDecisionManager.decide(token, null, list);

	// [4] set token in spring context
	SecurityContextHolder.getContext().setAuthentication(token);

	// [5] Process Success login
	InetAddress thisIp = InetAddress.getLocalHost();
	sessionMgr.processStandaloneSuccessLogin(
			XXAuthSession.AUTH_TYPE_PASSWORD, thisIp.getHostAddress());
}
 

@Override
protected void configureUrlAuthorization(
    ExpressionUrlAuthorizationConfigurer<HttpSecurity>.ExpressionInterceptUrlRegistry
        expressionInterceptUrlRegistry) {
  List<AccessDecisionVoter<?>> listOfVoters = new ArrayList<>();
  listOfVoters.add(new WebExpressionVoter());
  listOfVoters.add(molgenisAccessDecisionVoter());
  expressionInterceptUrlRegistry.accessDecisionManager(new AffirmativeBased(listOfVoters));

  expressionInterceptUrlRegistry.antMatchers("/").permitAll();
}
 

@Bean
public AccessDecisionManager customAccessDecisionManager() {
    List<AccessDecisionVoter<? extends Object>> decisionVoters = new ArrayList<>();
    decisionVoters.add(new RoleVoter());
    decisionVoters.add(new UsernameAccessDecisionVoter());
    AccessDecisionManager accessDecisionManager = new AffirmativeBased(decisionVoters);
    return accessDecisionManager;
}
 

@PostConstruct
public void init() {
	if (this.accessDecisionManager == null) {
		if (log.isDebugEnabled())
			log.debug("Creating default AffirmativeBased AccesDecisionManager with RoleVoter");
		
		List<AccessDecisionVoter<? extends Object>> defaultVoters =
				new ArrayList<AccessDecisionVoter<? extends Object>>();
		defaultVoters.add(new RoleVoter());
		this.accessDecisionManager = new AffirmativeBased(defaultVoters);
	}
}
 

@Bean
public AffirmativeBased accessDecisionManager() {
    return new AffirmativeBased(Collections.singletonList(webExpressionVoter()));
}
 

@Bean
AccessDecisionManager accessDecisionManager() {
    ImmutableList.Builder<AccessDecisionVoter<?>> lb = ImmutableList.builder();
    lb.add(new AdminRoleVoter());
    return new AffirmativeBased(lb.build());
}
 

@Bean
public AccessDecisionManager accessDecisionManager(){
	AffirmativeBased affirmative = new AffirmativeBased(Arrays.asList(multiWebExpressionVoter(), new WebExpressionVoter(), new AuthenticatedVoter()));
	return affirmative;
}