Package org.apache.shiro.authz.aop
package org.apache.shiro.authz.aop
Contains AOP implementation support classes specifically used for authorization operations, particularly supporting
AOP Method Interceptors and JSR-175 metadata Annotations.
-
ClassesClassDescriptionAn AnnotationsAuthorizingMethodInterceptor is a MethodInterceptor that asserts a given method is authorized to execute based on one or more configured AuthorizingAnnotationMethodInterceptors.Handles
RequiresAuthenticationannotations and ensures the calling subject is authenticated before allowing access.Checks to see if a @RequiresAuthenticatedannotation is declared, and if so, ensures the callingSubject.isAuthenticated()before invoking the method.An AnnotationHandler that executes authorization (access control) behavior based on directive(s) found in a JSR-175 Annotation.An AnnotationMethodInterceptor that asserts the calling code is authorized to execute the method before allowing the invocation to continue by inspecting code annotations to perform an access control check.Basic abstract class to support intercepting methods that perform authorization (access control) checks.ThisAnnotationHandlerdenys access from any subject (anonymous or logged in user).Checks to see if a @RequiresGuestannotation is declared, and if so, ensures the callingSubjectdoes not have anidentitybefore invoking the method.Checks to see if a @RequiresGuestannotation is declared, and if so, ensures the callingSubjectdoes not have anidentitybefore invoking the method.Checks to see if a @RequiresPermissionsannotation is declared, and if so, performs a permission check to see if the callingSubjectis allowed continued access.Checks to see if a @RequiresPermissionsannotation is declared, and if so, performs a permission check to see if the callingSubjectis allowed to call the method.ThisAnnotationHandlerallows access from any subject (anonymous or logged in user).Checks to see if a @RequiresRolesannotation is declared, and if so, performs a role check to see if the callingSubjectis allowed to proceed.Checks to see if a @RequiresRolesannotation is declared, and if so, performs a role check to see if the callingSubjectis allowed to invoke the method.Checks to see if a @RolesAllowedannotation is declared, and if so, performs a role check to see if the callingSubjectis allowed to proceed.Checks to see if a @RequiresUserannotation is declared, and if so, ensures the callingSubjectis eitherauthenticatedor remembered via remember me services before allowing access.Checks to see if a @RequiresUserannotation is declared, and if so, ensures the callingSubjectis eitherauthenticatedor remembered via remember me services before invoking the method.