November 2017
Intermediate to advanced
542 pages
14h 24m
English
Spring Security does actually allow for the configuration of AccessDecisionManager in the security namespace. The access-decision-manager-ref attribute on the <http> element allows you to specify a Spring bean reference to an implementation of AccessDecisionManager. Spring Security ships with three implementations of this interface, all in the o.s.s.access.vote package as follows:
|
Class name |
Description |
|
AffirmativeBased |
If any voter grants access, access is immediately granted, regardless of previous denials. |
|
ConsensusBased |
The majority vote (grant or deny) governs the decision of AccessDecisionManager. Tie-breaking and the handling of empty votes (containing only abstentions) ... |
Read now
Unlock full access