org.kuali.rice.ken.web.spring
Class SecurityInterceptor

java.lang.Object
  org.springframework.web.servlet.handler.HandlerInterceptorAdapter
      org.kuali.rice.ken.web.spring.SecurityInterceptor

All Implemented Interfaces:

org.springframework.web.servlet.HandlerInterceptor

public class SecurityInterceptor
extends org.springframework.web.servlet.handler.HandlerInterceptorAdapter

Spring HandlerInterceptor implementation that implements security. For now this just adds a flag to the request indicating whether the authenticated user is a Notification System administrator.

Author:

Kuali Rice Team (rice.collab@kuali.org)

Field Summary

protected NotificationAuthorizationService

notificationAuthzService

Constructor Summary

SecurityInterceptor()

Method Summary

boolean	preHandle(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response, Object handler) Decorate the incoming request with an attribute that indicates whether the user is a Notification System administrator
void	setNotificationAuthorizationService(NotificationAuthorizationService notificationAuthzService) Sets the NotificationAuthorizationService member

Methods inherited from class org.springframework.web.servlet.handler.HandlerInterceptorAdapter

afterCompletion, postHandle

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

notificationAuthzService

protected NotificationAuthorizationService notificationAuthzService

Constructor Detail

SecurityInterceptor

public SecurityInterceptor()

Method Detail

setNotificationAuthorizationService

public void setNotificationAuthorizationService(NotificationAuthorizationService notificationAuthzService)

Sets the NotificationAuthorizationService member

Parameters:

notificationAuthzService - NotificationAuthorizationService used to determine whether user is administrator

preHandle

public boolean preHandle(javax.servlet.http.HttpServletRequest request,
                         javax.servlet.http.HttpServletResponse response,
                         Object handler)
                  throws Exception

Decorate the incoming request with an attribute that indicates whether the user is a Notification System administrator

Specified by:

preHandle in interface org.springframework.web.servlet.HandlerInterceptor

Overrides:

preHandle in class org.springframework.web.servlet.handler.HandlerInterceptorAdapter

Throws:

Exception

See Also:

HandlerInterceptorAdapter.preHandle(javax.servlet.http.HttpServletRequest, javax.servlet.http.HttpServletResponse, java.lang.Object)