public final class Direction extends java.lang.Object
Directionclass is used to represent when the authorization check is to be performed by an Access Decision (either before a resource is accessed or after access has been allowed). Instances are
For example, if the
PRIOR and the
resource is a directory, the Access Decision might allow access.
POST, the Access Decision
might want to check what is being returned (that is, a particular file might be
returned from a directory that should not be). An Access Decision
might be called
ONCE for access to a resource or it might get called
PRIOR and then
POST access to a resource.
PRIOR determine if the resource can be accessed;
determines if what is being returned from the resource may be returned.
|Modifier and Type||Field||Description|
Indicates that the authorization check is being performed once, with no indication of whether it is being done before or after an operation.
Indicates that the authorization check is being peformed after the request has been allowed to be processed, but before the results have been returned.
Indicates that the authorization check is being performed prior to allowing the request to be processed.
|Modifier and Type||Method||Description|
public static final Direction ONCE
isAccessAllowedmethod using a
public static final Direction PRIOR
public static final Direction POST