SPRING IN ACTION 第4版笔记-第八章Advanced Spring MVC-007-给flowl加权限控制<secured>

最新推荐文章于 2024-11-13 20:43:20 发布

weixin_30741653

最新推荐文章于 2024-11-13 20:43:20 发布

阅读量81

点赞数

文章标签： java 测试

原文链接：http://www.cnblogs.com/shamgod/p/5248653.html

版权

本文详细介绍了如何在Spring WebFlow中利用<secured>元素来确保状态、转换和整个流程的安全性。通过配置<secured>元素，可以限制只有具有特定权限的用户才能访问特定的状态、执行特定的转换或执行整个流程。

摘要由CSDN通过智能技术生成

States, transitions, and entire flows can be secured in Spring Web Flow by using the <secured> element as a child of those elements. For example, to secure access to a view state, you might use <secured> like this:

1 <view-state id="restricted">
2     <secured attributes="ROLE_ADMIN" match="all"/>
3 </view-state>

As configured here, access to the view state will be restricted to only users who are granted ROLE_ADMIN access (per the attributes attribute). The attributes attribute takes a comma-separated list of authorities that the user must have to gain access to the state, transition, or flow. The match attribute can be set to either any or all . If it’s set to any , then the user must be granted at least one of the authorities listed in attributes . If it’s set to all , then the user must have been granted all the authorities.You may be wondering how a user is granted the authorities checked for by the <secured> element.

转载于:https://www.cnblogs.com/shamgod/p/5248653.html