001    /**
002     *   GRANITE DATA SERVICES
003     *   Copyright (C) 2006-2013 GRANITE DATA SERVICES S.A.S.
004     *
005     *   This file is part of the Granite Data Services Platform.
006     *
007     *   Granite Data Services is free software; you can redistribute it and/or
008     *   modify it under the terms of the GNU Lesser General Public
009     *   License as published by the Free Software Foundation; either
010     *   version 2.1 of the License, or (at your option) any later version.
011     *
012     *   Granite Data Services is distributed in the hope that it will be useful,
013     *   but WITHOUT ANY WARRANTY; without even the implied warranty of
014     *   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser
015     *   General Public License for more details.
016     *
017     *   You should have received a copy of the GNU Lesser General Public
018     *   License along with this library; if not, write to the Free Software
019     *   Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301,
020     *   USA, or see <http://www.gnu.org/licenses/>.
021     */
022    package org.granite.spring.security;
023    
024    import org.granite.messaging.service.security.AbstractSecurityContext;
025    import org.springframework.security.access.SecurityMetadataSource;
026    import org.springframework.security.access.intercept.AbstractSecurityInterceptor;
027    import org.springframework.security.access.intercept.InterceptorStatusToken;
028    import org.springframework.security.web.FilterInvocation;
029    import org.springframework.security.web.access.intercept.FilterInvocationSecurityMetadataSource;
030    
031    
032    public abstract class AbstractSpringSecurity3Interceptor extends AbstractSecurityInterceptor {
033            
034            private FilterInvocationSecurityMetadataSource securityMetadataSource;
035    
036            @Override
037            public Class<? extends Object> getSecureObjectClass() {
038                    return FilterInvocation.class;
039            }
040    
041            @Override
042            public SecurityMetadataSource obtainSecurityMetadataSource() {
043                    return securityMetadataSource;
044            }
045            
046            public void setSecurityMetadataSource(FilterInvocationSecurityMetadataSource newSource) {
047                    this.securityMetadataSource = newSource;
048            }
049            
050            public Object invoke(AbstractSecurityContext securityContext) throws Exception {
051                    FilterInvocation fi = buildFilterInvocation(securityContext);
052                    InterceptorStatusToken token = beforeInvocation(fi);
053                    Object returnedObject = null;
054                    try {
055                            returnedObject = securityContext.invoke();
056                    }
057                    finally {
058                            returnedObject = afterInvocation(token, returnedObject);
059                    }
060                    return returnedObject;
061            }
062            
063            protected abstract FilterInvocation buildFilterInvocation(AbstractSecurityContext securityContext);
064            
065    }