org.riotfamily.riot.security.session
Class AccessControlInterceptor

java.lang.Object
  org.springframework.web.servlet.handler.HandlerInterceptorAdapter
      org.riotfamily.common.web.interceptor.PathMatchingInterceptor
          org.riotfamily.common.web.interceptor.OncePerRequestInterceptor
              org.riotfamily.riot.security.session.AccessControlInterceptor

All Implemented Interfaces:

ServletContextAware, HandlerInterceptor

Direct Known Subclasses:

LoginInterceptor

public class AccessControlInterceptor
extends OncePerRequestInterceptor
implements ServletContextAware

HandlerInterceptor that binds the authenticated user (if present) to the current thread.

See Also:

AccessController

Constructor Summary

AccessControlInterceptor()

Method Summary

void	afterLastCompletion(HttpServletRequest request, HttpServletResponse response, Object handler, Exception ex)
protected boolean	isAuthorized(HttpServletRequest request, HttpServletResponse response, RiotUser user)
boolean	preHandleOnce(HttpServletRequest request, HttpServletResponse response, Object handler)
void	setServletContext(ServletContext servletContext)

Methods inherited from class org.riotfamily.common.web.interceptor.OncePerRequestInterceptor

afterCompletion, doPreHandle

Methods inherited from class org.riotfamily.common.web.interceptor.PathMatchingInterceptor

anyMatch, preHandle, setExcludes, setIncludes, setIncludesOverwriteExcludes, setPathMatcher

Methods inherited from class org.springframework.web.servlet.handler.HandlerInterceptorAdapter

postHandle

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AccessControlInterceptor

public AccessControlInterceptor()

Method Detail

setServletContext

public void setServletContext(ServletContext servletContext)

Specified by:

setServletContext in interface ServletContextAware

preHandleOnce

public boolean preHandleOnce(HttpServletRequest request,
                             HttpServletResponse response,
                             Object handler)
                      throws Exception

Overrides:

preHandleOnce in class OncePerRequestInterceptor

Throws:

Exception

isAuthorized

protected boolean isAuthorized(HttpServletRequest request,
                               HttpServletResponse response,
                               RiotUser user)
                        throws Exception

Throws:

Exception

afterLastCompletion

public final void afterLastCompletion(HttpServletRequest request,
                                      HttpServletResponse response,
                                      Object handler,
                                      Exception ex)
                               throws Exception

Overrides:

afterLastCompletion in class OncePerRequestInterceptor

Throws:

Exception