May 2nd, 2009, 05:43 PM
The doc says it provides method security for all of the beans registered in the application context. Can somebody tells which class or filter(s) registers all the methods with the MethodSecurityInterceptor class. I am quite confused.
Thank you, Jagadish
May 6th, 2009, 12:17 PM
I don't understand your question, please elaborate if you need more information than below.
How I think it's done: (I'm a framework beginner myself.)
- Use <global-method-security secured-annotations="enabled">
- Annotate the methods you want to secure using @Secured("THE_USER_ROLE")
- Make sure you have aspectjweaver and aspectjrt on the classpath at runtime
May 6th, 2009, 12:22 PM
Thanks for the reply. I understood those basics, but more interested in the internals.
I am looking into this source code, but got quite confused on how the invoke method on SecurityMethodIntrecptor object is called at runtime. I guess my question is - where is pointcut and advice for all of the beans registered with the spring aop framework.