org.kuali.rice.ken.web.spring

Class SecurityInterceptor

java.lang.Object

org.springframework.web.servlet.handler.HandlerInterceptorAdapter

org.kuali.rice.ken.web.spring.SecurityInterceptor

All Implemented Interfaces:

org.springframework.web.servlet.AsyncHandlerInterceptor, org.springframework.web.servlet.HandlerInterceptor

public class SecurityInterceptor
extends org.springframework.web.servlet.handler.HandlerInterceptorAdapter

Spring HandlerInterceptor implementation that implements security. For now this just adds a flag to the request indicating whether the authenticated user is a Notification System administrator.

Author:

Kuali Rice Team (rice.collab@kuali.org)

Field Summary

Fields

Modifier and Type	Field and Description
protected NotificationAuthorizationService	notificationAuthzService

Constructor Summary

Constructors

Constructor and Description
SecurityInterceptor()

Method Summary

Modifier and Type	Method and Description
boolean	preHandle(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response, Object handler) Decorate the incoming request with an attribute that indicates whether the user is a Notification System administrator
void	setNotificationAuthorizationService(NotificationAuthorizationService notificationAuthzService) Sets the NotificationAuthorizationService member

Methods inherited from class org.springframework.web.servlet.handler.HandlerInterceptorAdapter

afterCompletion, afterConcurrentHandlingStarted, postHandle

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

notificationAuthzService

protected NotificationAuthorizationService notificationAuthzService

Constructor Detail

SecurityInterceptor

public SecurityInterceptor()

Method Detail

setNotificationAuthorizationService

public void setNotificationAuthorizationService(NotificationAuthorizationService notificationAuthzService)

Sets the NotificationAuthorizationService member

Parameters:

notificationAuthzService - NotificationAuthorizationService used to determine whether user is administrator

preHandle

public boolean preHandle(javax.servlet.http.HttpServletRequest request,
                         javax.servlet.http.HttpServletResponse response,
                         Object handler)
                  throws Exception

Decorate the incoming request with an attribute that indicates whether the user is a Notification System administrator

Specified by:

preHandle in interface org.springframework.web.servlet.HandlerInterceptor

Overrides:

preHandle in class org.springframework.web.servlet.handler.HandlerInterceptorAdapter

Throws:

Exception

See Also:

HandlerInterceptorAdapter.preHandle(javax.servlet.http.HttpServletRequest, javax.servlet.http.HttpServletResponse, java.lang.Object)