org.apache.deltaspike.security.api.authorization
Interface AccessDecisionVoter

All Superinterfaces:

Serializable

public interface AccessDecisionVoter
extends Serializable

Interface for implementing concrete voters. A voter has to add an instance of SecurityViolation to the given result-set, if a restriction is detected.

A voter has to be used in combination with Secured.

A voter can use every scope which is active. It's recommended to use javax.enterprise.context.ApplicationScoped for stateless voters and e.g. javax.enterprise.context.RequestScoped otherwise.

Method Summary

Set<SecurityViolation>

checkPermission(AccessDecisionVoterContext accessDecisionVoterContext) Checks the permission for the given InvocationContext.

Method Detail

checkPermission

Set<SecurityViolation> checkPermission(AccessDecisionVoterContext accessDecisionVoterContext)

Checks the permission for the given InvocationContext. If a violation is detected, it should be added to a set which gets returned by the method.

Parameters:

accessDecisionVoterContext - current access-decision-voter-context

Returns:

a set which contains violations which have been detected