Package org.kuali.rice.ken.web.spring

Class SecurityInterceptor

java.lang.Object

org.springframework.web.servlet.handler.HandlerInterceptorAdapter

org.kuali.rice.ken.web.spring.SecurityInterceptor

All Implemented Interfaces:

org.springframework.web.servlet.AsyncHandlerInterceptor, org.springframework.web.servlet.HandlerInterceptor

public class SecurityInterceptor
extends org.springframework.web.servlet.handler.HandlerInterceptorAdapter

Spring HandlerInterceptor implementation that implements security. For now this just adds a flag to the request indicating whether the authenticated user is a Notification System administrator.

Author:

Kuali Rice Team (rice.collab@kuali.org)

Field Summary

Fields

Modifier and Type	Field	Description
protected NotificationAuthorizationService	notificationAuthzService

Constructor Summary

Constructors

Constructor	Description
SecurityInterceptor()

Method Summary

Modifier and Type	Method	Description
boolean	preHandle(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response, Object handler)	Decorate the incoming request with an attribute that indicates whether the user is a Notification System administrator
void	setNotificationAuthorizationService(NotificationAuthorizationService notificationAuthzService)	Sets the NotificationAuthorizationService member

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.springframework.web.servlet.AsyncHandlerInterceptor

afterConcurrentHandlingStarted

Methods inherited from interface org.springframework.web.servlet.HandlerInterceptor

afterCompletion, postHandle

Field Details

notificationAuthzService

protected NotificationAuthorizationService notificationAuthzService

Constructor Details

SecurityInterceptor

public SecurityInterceptor()

Method Details

setNotificationAuthorizationService

public void setNotificationAuthorizationService(NotificationAuthorizationService notificationAuthzService)

Sets the NotificationAuthorizationService member

Parameters:

notificationAuthzService - NotificationAuthorizationService used to determine whether user is administrator

preHandle

public boolean preHandle(javax.servlet.http.HttpServletRequest request,
 javax.servlet.http.HttpServletResponse response,
 Object handler)
                  throws Exception

Decorate the incoming request with an attribute that indicates whether the user is a Notification System administrator

Throws:

Exception

See Also:

• HandlerInterceptor.preHandle(javax.servlet.http.HttpServletRequest, javax.servlet.http.HttpServletResponse, java.lang.Object)