Spring Security - Third Edition

The AclAuthorizationStrategyImpl interface

The final dependency to resolve is to an implementation of the o.s.s.acls.domain.AclAuthorizationStrategy interface, which actually has no immediate responsibility at all during the load of the ACL from the database. Instead, the implementation of this interface is responsible for determining whether a runtime change to an ACL or ACE is allowed, based on the type of change. We'll explain more on this later when we cover mutable ACLs, as the logical flow is both somewhat complicated and not pertinent to getting our initial configuration complete. The final configuration requirements are as follows:

src/main/java/com/packtpub/springsecurity/configuration/AclConfig.java@Beanpublic AclAuthorizationStrategy ...