ObjectDefinitionSource转SecurityMetadataSource

ObjectDefinitionSource转SecurityMetadataSource

转  http://chembo.iteye.com/blog/976617

spring security 3.0.X开始, org.springframework.security.web.access.intercept.FilterSecurityInterceptor中的ObjectDefinitionSource已被舍弃,继而由SecurityMetadataSource代替.
原来securiyt.xml中的配置如:

Xml代码  

1. <bean id="filterSecurityInterceptor" class="org.springframework.security.intercept.web.FilterSecurityInterceptor">  
2.         <property name="authenticationManager" ref="authenticationManager"/>  
3.         <property name="accessDecisionManager" ref="accessDecisionManager"/>  
4.         <property name="objectDefinitionSource">  
5.             <value>  
6.             <![CDATA[  
7.                 CONVERT_URL_TO_LOWERCASE_BEFORE_COMPARISON 
8.                 PATTERN_TYPE_APACHE_ANT 
9.                 /myaccountsetting/*=    ROLE_ADMIN 
10.                 /portal/*=              ROLE_ANYONE              
11.             ]]>   
12.             </value>  
13.         </property>  
14.         <property name="observeOncePerRequest" value="false" />  
15.         <sec:custom-filter after="LAST" />  
16.     </bean>  

需转成:

Xml代码  

1. <beans:bean id="filterSecurityInterceptor" class="org.springframework.security.web.access.intercept.FilterSecurityInterceptor">  
2.         <beans:property name="authenticationManager" ref="authenticationManager"/>  
3.         <beans:property name="accessDecisionManager" ref="accessDecisionManager"/>  
4.         <beans:property name="securityMetadataSource">  
5.             <filter-security-metadata-source>  
6.                 <intercept-url pattern="/myaccount/*"  access="ROLE_ADMIN" />  
7.                         <intercept-url pattern="/portal/*"  access="ROLE_ANYONE" />  
8.             </filter-security-metadata-source>  
9.         </beans:property>  
10.         <beans:property name="observeOncePerRequest" value="false" />  
11.     </beans:bean>