001/**
002 *   GRANITE DATA SERVICES
003 *   Copyright (C) 2006-2013 GRANITE DATA SERVICES S.A.S.
004 *
005 *   This file is part of the Granite Data Services Platform.
006 *
007 *   Granite Data Services is free software; you can redistribute it and/or
008 *   modify it under the terms of the GNU Lesser General Public
009 *   License as published by the Free Software Foundation; either
010 *   version 2.1 of the License, or (at your option) any later version.
011 *
012 *   Granite Data Services is distributed in the hope that it will be useful,
013 *   but WITHOUT ANY WARRANTY; without even the implied warranty of
014 *   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser
015 *   General Public License for more details.
016 *
017 *   You should have received a copy of the GNU Lesser General Public
018 *   License along with this library; if not, write to the Free Software
019 *   Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301,
020 *   USA, or see <http://www.gnu.org/licenses/>.
021 */
022package org.granite.spring.security;
023
024import org.granite.messaging.service.security.AbstractSecurityContext;
025import org.springframework.security.access.SecurityMetadataSource;
026import org.springframework.security.access.intercept.AbstractSecurityInterceptor;
027import org.springframework.security.access.intercept.InterceptorStatusToken;
028import org.springframework.security.web.FilterInvocation;
029import org.springframework.security.web.access.intercept.FilterInvocationSecurityMetadataSource;
030
031
032public abstract class AbstractSpringSecurity3Interceptor extends AbstractSecurityInterceptor {
033        
034        private FilterInvocationSecurityMetadataSource securityMetadataSource;
035
036        @Override
037        public Class<? extends Object> getSecureObjectClass() {
038                return FilterInvocation.class;
039        }
040
041        @Override
042        public SecurityMetadataSource obtainSecurityMetadataSource() {
043                return securityMetadataSource;
044        }
045        
046        public void setSecurityMetadataSource(FilterInvocationSecurityMetadataSource newSource) {
047                this.securityMetadataSource = newSource;
048        }
049        
050        public Object invoke(AbstractSecurityContext securityContext) throws Exception {
051                FilterInvocation fi = buildFilterInvocation(securityContext);
052                InterceptorStatusToken token = beforeInvocation(fi);
053                Object returnedObject = null;
054                try {
055                        returnedObject = securityContext.invoke();
056                }
057                finally {
058                        returnedObject = afterInvocation(token, returnedObject);
059                }
060                return returnedObject;
061        }
062        
063        protected abstract FilterInvocation buildFilterInvocation(AbstractSecurityContext securityContext);
064        
065}