Examples with MethodSecurityMetadataSourceAdvisor org.springframework.security.access.intercept.aopalliance.MethodSecurityMetadataSourceAdvisor used on opensource projects

Example 1 with MethodSecurityMetadataSourceAdvisor

use of org.springframework.security.access.intercept.aopalliance.MethodSecurityMetadataSourceAdvisor in project spring-security by spring-projects.

the class GlobalMethodSecurityBeanDefinitionParserTests method targetShouldAllowProtectedMethodInvocationWithCorrectRole.

@Test
public void targetShouldAllowProtectedMethodInvocationWithCorrectRole() {
    loadContext();
    UsernamePasswordAuthenticationToken token = new UsernamePasswordAuthenticationToken("user", "password");
    SecurityContextHolder.getContext().setAuthentication(token);
    target.someUserMethod1();
    // SEC-1213. Check the order
    Advisor[] advisors = ((Advised) target).getAdvisors();
    assertThat(advisors.length).isEqualTo(1);
    assertThat(((MethodSecurityMetadataSourceAdvisor) advisors[0]).getOrder()).isEqualTo(1001);
}

Example 2 with MethodSecurityMetadataSourceAdvisor

use of org.springframework.security.access.intercept.aopalliance.MethodSecurityMetadataSourceAdvisor in project spring-security by spring-projects.

the class GlobalMethodSecurityBeanDefinitionParserTests method expressionVoterAndAfterInvocationProviderUseSameExpressionHandlerInstance.

// Expression configuration tests
@SuppressWarnings("unchecked")
@Test
public void expressionVoterAndAfterInvocationProviderUseSameExpressionHandlerInstance() throws Exception {
    setContext("<global-method-security pre-post-annotations='enabled'/>" + AUTH_PROVIDER_XML);
    AffirmativeBased adm = (AffirmativeBased) appContext.getBeansOfType(AffirmativeBased.class).values().toArray()[0];
    List voters = (List) FieldUtils.getFieldValue(adm, "decisionVoters");
    PreInvocationAuthorizationAdviceVoter mev = (PreInvocationAuthorizationAdviceVoter) voters.get(0);
    MethodSecurityMetadataSourceAdvisor msi = (MethodSecurityMetadataSourceAdvisor) appContext.getBeansOfType(MethodSecurityMetadataSourceAdvisor.class).values().toArray()[0];
    AfterInvocationProviderManager pm = (AfterInvocationProviderManager) ((MethodSecurityInterceptor) msi.getAdvice()).getAfterInvocationManager();
    PostInvocationAdviceProvider aip = (PostInvocationAdviceProvider) pm.getProviders().get(0);
    assertThat(FieldUtils.getFieldValue(mev, "preAdvice.expressionHandler")).isSameAs(FieldUtils.getFieldValue(aip, "postAdvice.expressionHandler"));
}

Example 3 with MethodSecurityMetadataSourceAdvisor

use of org.springframework.security.access.intercept.aopalliance.MethodSecurityMetadataSourceAdvisor in project spring-security by spring-projects.

the class GlobalMethodSecurityBeanDefinitionParserTests method runAsManagerIsSetCorrectly.

@Test
public void runAsManagerIsSetCorrectly() throws Exception {
    StaticApplicationContext parent = new StaticApplicationContext();
    MutablePropertyValues props = new MutablePropertyValues();
    props.addPropertyValue("key", "blah");
    parent.registerSingleton("runAsMgr", RunAsManagerImpl.class, props);
    parent.refresh();
    setContext("<global-method-security run-as-manager-ref='runAsMgr'/>" + AUTH_PROVIDER_XML, parent);
    RunAsManagerImpl ram = (RunAsManagerImpl) appContext.getBean("runAsMgr");
    MethodSecurityMetadataSourceAdvisor msi = (MethodSecurityMetadataSourceAdvisor) appContext.getBeansOfType(MethodSecurityMetadataSourceAdvisor.class).values().toArray()[0];
    assertThat(ram).isSameAs(FieldUtils.getFieldValue(msi.getAdvice(), "runAsManager"));
}