Examples with PreInvocationExpressionAttribute org.springframework.security.access.expression.method.PreInvocationExpressionAttribute used on opensource projects

Example 6 with PreInvocationExpressionAttribute

use of org.springframework.security.access.expression.method.PreInvocationExpressionAttribute in project spring-security by spring-projects.

the class MethodExpressionVoterTests method hasRoleExpressionAllowsUserWithRole.

@Test
public void hasRoleExpressionAllowsUserWithRole() throws Exception {
    MethodInvocation mi = new SimpleMethodInvocation(new TargetImpl(), methodTakingAnArray());
    assertThat(am.vote(joe, mi, createAttributes(new PreInvocationExpressionAttribute(null, null, "hasRole('blah')")))).isEqualTo(AccessDecisionVoter.ACCESS_GRANTED);
}

Example 7 with PreInvocationExpressionAttribute

use of org.springframework.security.access.expression.method.PreInvocationExpressionAttribute in project spring-security by spring-projects.

the class MethodExpressionVoterTests method accessIsGrantedIfNoPreAuthorizeAttributeIsUsed.

@Test
public void accessIsGrantedIfNoPreAuthorizeAttributeIsUsed() throws Exception {
    Collection arg = createCollectionArg("joe", "bob", "sam");
    MethodInvocation mi = new SimpleMethodInvocation(new TargetImpl(), methodTakingACollection(), arg);
    assertThat(am.vote(joe, mi, createAttributes(new PreInvocationExpressionAttribute("(filterObject == 'jim')", "collection", null)))).isEqualTo(AccessDecisionVoter.ACCESS_GRANTED);
    // All objects should have been removed, because the expression is always false
    assertThat(arg).isEmpty();
}

Example 8 with PreInvocationExpressionAttribute

use of org.springframework.security.access.expression.method.PreInvocationExpressionAttribute in project spring-security by spring-projects.

the class MethodExpressionVoterTests method matchingArgAgainstAuthenticationNameIsSuccessful.

@Test
public void matchingArgAgainstAuthenticationNameIsSuccessful() throws Exception {
    MethodInvocation mi = new SimpleMethodInvocation(new TargetImpl(), methodTakingAString(), "joe");
    assertThat(am.vote(joe, mi, createAttributes(new PreInvocationExpressionAttribute(null, null, "(#argument == principal) and (principal == 'joe')")))).isEqualTo(AccessDecisionVoter.ACCESS_GRANTED);
}

Example 9 with PreInvocationExpressionAttribute

use of org.springframework.security.access.expression.method.PreInvocationExpressionAttribute in project spring-security by spring-projects.

the class MethodExpressionVoterTests method hasRoleExpressionDeniesUserWithoutRole.

@Test
public void hasRoleExpressionDeniesUserWithoutRole() throws Exception {
    List<ConfigAttribute> cad = new ArrayList<ConfigAttribute>(1);
    cad.add(new PreInvocationExpressionAttribute(null, null, "hasRole('joedoesnt')"));
    MethodInvocation mi = new SimpleMethodInvocation(new TargetImpl(), methodTakingAnArray());
    assertThat(am.vote(joe, mi, cad)).isEqualTo(AccessDecisionVoter.ACCESS_DENIED);
}