I'm trying to implement some code such that the authorization depends on the filename and on the method. So my application context looks like
andCode:<bean id="filterInvocationInterceptor" class="org.acegisecurity.intercept.web.FilterSecurityInterceptor"> <property name="authenticationManager" ref="authenticationManager" /> <property name="accessDecisionManager"> <bean class="org.acegisecurity.vote.AffirmativeBased"> <property name="allowIfAllAbstainDecisions" value="false" /> <property name="decisionVoters"> <list> <bean class="org.acegisecurity.vote.RoleVoter" /> <bean class="org.acegisecurity.vote.AuthenticatedVoter" /> </list> </property> </bean> </property> <property name="objectDefinitionSource"> <value> <![CDATA[ CONVERT_URL_TO_LOWERCASE_BEFORE_COMPARISON PATTERN_TYPE_APACHE_ANT /logout.*=IS_AUTHENTICATED_ANONYMOUSLY /**=ROLE_USER ]]> </value> </property> </bean>
My problem is that Acegi Security seems to not beeing very interested in the second block of statements.Code:<bean class="org.springframework.aop.framework.autoproxy.DefaultAdvisorAutoProxyCreator"/> <bean class="org.acegisecurity.intercept.method.aopalliance.MethodDefinitionSourceAdvisor"> <constructor-arg> <ref bean="myMethodInterceptor"/> </constructor-arg> </bean> <bean id="myMethodInterceptor" class="org.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor"> <property name="validateConfigAttributes" value="false"/> <property name="authenticationManager" ref="authenticationManager"/> <property name="accessDecisionManager"> <bean class="org.acegisecurity.vote.AffirmativeBased"> <property name="allowIfAllAbstainDecisions" value="false" /> <property name="decisionVoters"> <list> <bean class="org.acegisecurity.vote.RoleVoter" /> <bean class="org.acegisecurity.vote.AuthenticatedVoter" /> </list> </property> </bean> </property> <property name="objectDefinitionSource"> <value> org.bla.MyClass.*=ROLE_ADMINISTRATOR </value> </property> </bean>
Can anyone help me?
Thanks
Sabata
P.S.: I'm a totally newbie.


