Index (spring-security-access 7.0.2 API)

A B C D E F G H I J L M O P R S T U V W
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form

A

AbstractAccessDecisionManager - Class in org.springframework.security.access.vote: Deprecated.
Use AuthorizationManager instead
AbstractAccessDecisionManager(List<AccessDecisionVoter<?>>) - Constructor for class org.springframework.security.access.vote.AbstractAccessDecisionManager: Deprecated.
AbstractAclProvider - Class in org.springframework.security.acls.afterinvocation: Deprecated.
please use AclPermissionEvaluator instead. Spring Method Security annotations may also prove useful, for example @PostAuthorize("hasPermission(filterObject, read)")
AbstractAclProvider(AclService, String, List<Permission>) - Constructor for class org.springframework.security.acls.afterinvocation.AbstractAclProvider: Deprecated.
AbstractAclVoter - Class in org.springframework.security.access.vote: Deprecated.
Now used by only-deprecated classes. Generally speaking, in-memory ACL is no longer advised, so no replacement is planned at this point.
AbstractAclVoter() - Constructor for class org.springframework.security.access.vote.AbstractAclVoter: Deprecated.
AbstractAuthorizationEvent - Class in org.springframework.security.access.event: Deprecated.
Authorization events have moved. Consider AuthorizationGrantedEvent and AuthorizationDeniedEvent
AbstractAuthorizationEvent(Object) - Constructor for class org.springframework.security.access.event.AbstractAuthorizationEvent: Deprecated.

Construct the event, passing in the secure object being intercepted.
AbstractFallbackMethodSecurityMetadataSource - Class in org.springframework.security.access.method: Deprecated.
Use the use-authorization-manager attribute for <method-security> and <intercept-methods> instead or use annotation-based or AuthorizationManager-based authorization
AbstractFallbackMethodSecurityMetadataSource() - Constructor for class org.springframework.security.access.method.AbstractFallbackMethodSecurityMetadataSource: Deprecated.
AbstractMethodSecurityMetadataSource - Class in org.springframework.security.access.method: Deprecated.
Use the use-authorization-manager attribute for <method-security> and <intercept-methods> instead or use annotation-based or AuthorizationManager-based authorization
AbstractMethodSecurityMetadataSource() - Constructor for class org.springframework.security.access.method.AbstractMethodSecurityMetadataSource: Deprecated.
AbstractRetryEntryPoint - Class in org.springframework.security.web.access.channel: Deprecated.
please use HttpsRedirectFilter and its associated PortMapper
AbstractRetryEntryPoint(String, int) - Constructor for class org.springframework.security.web.access.channel.AbstractRetryEntryPoint: Deprecated.
AbstractSecurityInterceptor - Class in org.springframework.security.access.intercept: Deprecated.
Use AuthorizationFilter instead for filter security, AuthorizationChannelInterceptor for messaging security, or AuthorizationManagerBeforeMethodInterceptor and AuthorizationManagerAfterMethodInterceptor for method security.
AbstractSecurityInterceptor() - Constructor for class org.springframework.security.access.intercept.AbstractSecurityInterceptor: Deprecated.
ACCESS_ABSTAIN - Static variable in interface org.springframework.security.access.AccessDecisionVoter: Deprecated.
ACCESS_DENIED - Static variable in interface org.springframework.security.access.AccessDecisionVoter: Deprecated.
ACCESS_GRANTED - Static variable in interface org.springframework.security.access.AccessDecisionVoter: Deprecated.
AccessDecisionManager - Interface in org.springframework.security.access: Deprecated.
Use AuthorizationManager instead
AccessDecisionVoter<S> - Interface in org.springframework.security.access: Deprecated.
Use AuthorizationManager instead
AclEntryAfterInvocationCollectionFilteringProvider - Class in org.springframework.security.acls.afterinvocation: Deprecated.
please use AclPermissionEvaluator instead. Spring Method Security annotations may also prove useful, for example @PostFilter("hasPermission(filterObject, read)")
AclEntryAfterInvocationCollectionFilteringProvider(AclService, List<Permission>) - Constructor for class org.springframework.security.acls.afterinvocation.AclEntryAfterInvocationCollectionFilteringProvider: Deprecated.
AclEntryAfterInvocationProvider - Class in org.springframework.security.acls.afterinvocation: Deprecated.
please use AclPermissionEvaluator instead. Spring Method Security annotations may also prove useful, for example @PostAuthorize("hasPermission(filterObject, read)")
AclEntryAfterInvocationProvider(AclService, String, List<Permission>) - Constructor for class org.springframework.security.acls.afterinvocation.AclEntryAfterInvocationProvider: Deprecated.
AclEntryAfterInvocationProvider(AclService, List<Permission>) - Constructor for class org.springframework.security.acls.afterinvocation.AclEntryAfterInvocationProvider: Deprecated.
AclEntryVoter - Class in org.springframework.security.acls: Deprecated.
please use AclPermissionEvaluator instead. Spring Method Security annotations may also prove useful, for example @PreAuthorize("hasPermission(#id, ObjectsReturnType.class, read)")
AclEntryVoter(AclService, String, Permission[]) - Constructor for class org.springframework.security.acls.AclEntryVoter: Deprecated.
aclService - Variable in class org.springframework.security.acls.afterinvocation.AbstractAclProvider: Deprecated.
addSecureMethod(Class<?>, Method, List<ConfigAttribute>) - Method in class org.springframework.security.access.method.MapBasedMethodSecurityMetadataSource: Deprecated.

Adds configuration attributes for a specific method, for example where the method has been matched using a pointcut expression.
addSecureMethod(Class<?>, String, List<ConfigAttribute>) - Method in class org.springframework.security.access.method.MapBasedMethodSecurityMetadataSource: Deprecated.

Add configuration attributes for a secure method.
AffirmativeBased - Class in org.springframework.security.access.vote: Deprecated.
Use AuthorizationManager instead
AffirmativeBased(List<AccessDecisionVoter<?>>) - Constructor for class org.springframework.security.access.vote.AffirmativeBased: Deprecated.
after(Authentication, MethodInvocation, PostInvocationAttribute, Object) - Method in class org.springframework.security.access.expression.method.ExpressionBasedPostInvocationAdvice: Deprecated.
after(Authentication, MethodInvocation, PostInvocationAttribute, Object) - Method in interface org.springframework.security.access.prepost.PostInvocationAuthorizationAdvice: Deprecated.
afterInvocation(InterceptorStatusToken, Object) - Method in class org.springframework.security.access.intercept.AbstractSecurityInterceptor: Deprecated.

Completes the work of the AbstractSecurityInterceptor after the secure object invocation has been completed.
AfterInvocationManager - Interface in org.springframework.security.access.intercept: Deprecated.
Use delegation with AuthorizationManager
AfterInvocationProvider - Interface in org.springframework.security.access: Deprecated.
Use delegation with AuthorizationManager
AfterInvocationProviderManager - Class in org.springframework.security.access.intercept: Deprecated.
Use delegation with AuthorizationManager
AfterInvocationProviderManager() - Constructor for class org.springframework.security.access.intercept.AfterInvocationProviderManager: Deprecated.
afterPropertiesSet() - Method in class org.springframework.security.access.intercept.AbstractSecurityInterceptor: Deprecated.
afterPropertiesSet() - Method in class org.springframework.security.access.intercept.AfterInvocationProviderManager: Deprecated.
afterPropertiesSet() - Method in class org.springframework.security.access.intercept.MethodInvocationPrivilegeEvaluator: Deprecated.
afterPropertiesSet() - Method in class org.springframework.security.access.intercept.RunAsImplAuthenticationProvider: Deprecated.
afterPropertiesSet() - Method in class org.springframework.security.access.intercept.RunAsManagerImpl: Deprecated.
afterPropertiesSet() - Method in class org.springframework.security.access.vote.AbstractAccessDecisionManager: Deprecated.
afterPropertiesSet() - Method in class org.springframework.security.web.access.channel.ChannelDecisionManagerImpl: Deprecated.
afterPropertiesSet() - Method in class org.springframework.security.web.access.channel.ChannelProcessingFilter: Deprecated.
afterPropertiesSet() - Method in class org.springframework.security.web.access.channel.InsecureChannelProcessor: Deprecated.
afterPropertiesSet() - Method in class org.springframework.security.web.access.channel.SecureChannelProcessor: Deprecated.
afterReceiveCompletion(Message<?>, MessageChannel, Exception) - Method in class org.springframework.security.messaging.access.intercept.ChannelSecurityInterceptor: Deprecated.
afterSendCompletion(Message<?>, MessageChannel, boolean, Exception) - Method in class org.springframework.security.messaging.access.intercept.ChannelSecurityInterceptor: Deprecated.
AnnotationMetadataExtractor<A extends Annotation> - Interface in org.springframework.security.access.annotation: Deprecated.
Used only by now-deprecated classes. Consider SecuredAuthorizationManager for `@Secured` methods.
ANY_CHANNEL - Static variable in class org.springframework.security.web.access.channel.ChannelDecisionManagerImpl: Deprecated.
AspectJCallback - Interface in org.springframework.security.access.intercept.aspectj: Deprecated.
This class will be removed from the public API. Please either use `spring-security-aspects`, Spring Security's method security support or create your own class that uses Spring AOP annotations.
AspectJMethodSecurityInterceptor - Class in org.springframework.security.access.intercept.aspectj: Deprecated.
This class will be removed from the public API. Please either use `spring-security-aspects`, Spring Security's method security support or create your own class that uses Spring AOP annotations.
AspectJMethodSecurityInterceptor() - Constructor for class org.springframework.security.access.intercept.aspectj.AspectJMethodSecurityInterceptor: Deprecated.
authenticate(Authentication) - Method in class org.springframework.security.access.intercept.RunAsImplAuthenticationProvider: Deprecated.
AuthenticatedVoter - Class in org.springframework.security.access.vote: Deprecated.
Use AuthorityAuthorizationManager instead
AuthenticatedVoter() - Constructor for class org.springframework.security.access.vote.AuthenticatedVoter: Deprecated.
AuthenticationCredentialsNotFoundEvent - Class in org.springframework.security.access.event: Deprecated.
Authentication is now separated from authorization. Consider AbstractAuthenticationFailureEvent instead.
AuthenticationCredentialsNotFoundEvent(Object, Collection<ConfigAttribute>, AuthenticationCredentialsNotFoundException) - Constructor for class org.springframework.security.access.event.AuthenticationCredentialsNotFoundEvent: Deprecated.

Construct the event.
AuthorizationFailureEvent - Class in org.springframework.security.access.event: Deprecated.
Use AuthorizationDeniedEvent instead
AuthorizationFailureEvent(Object, Collection<ConfigAttribute>, Authentication, AccessDeniedException) - Constructor for class org.springframework.security.access.event.AuthorizationFailureEvent: Deprecated.

Construct the event.
AuthorizedEvent - Class in org.springframework.security.access.event: Deprecated.
Use AuthorizationGrantedEvent instead
AuthorizedEvent(Object, Collection<ConfigAttribute>, Authentication) - Constructor for class org.springframework.security.access.event.AuthorizedEvent: Deprecated.

Construct the event.

B

before(Authentication, MethodInvocation, PreInvocationAttribute) - Method in class org.springframework.security.access.expression.method.ExpressionBasedPreInvocationAdvice: Deprecated.
before(Authentication, MethodInvocation, PreInvocationAttribute) - Method in interface org.springframework.security.access.prepost.PreInvocationAuthorizationAdvice: Deprecated.

The "before" advice which should be executed to perform any filtering necessary and to decide whether the method call is authorised.
beforeInvocation(Object) - Method in class org.springframework.security.access.intercept.AbstractSecurityInterceptor: Deprecated.
buildRunAs(Authentication, Object, Collection<ConfigAttribute>) - Method in interface org.springframework.security.access.intercept.RunAsManager: Deprecated.

Returns a replacement Authentication object for the current secure object invocation, or null if replacement not required.
buildRunAs(Authentication, Object, Collection<ConfigAttribute>) - Method in class org.springframework.security.access.intercept.RunAsManagerImpl: Deprecated.

C

ChannelDecisionManager - Interface in org.springframework.security.web.access.channel: Deprecated.
no replacement is planned, though consider using a custom RequestMatcher for any sophisticated decision-making
ChannelDecisionManagerImpl - Class in org.springframework.security.web.access.channel: Deprecated.
no replacement is planned, though consider using a custom RequestMatcher for any sophisticated decision-making
ChannelDecisionManagerImpl() - Constructor for class org.springframework.security.web.access.channel.ChannelDecisionManagerImpl: Deprecated.
ChannelEntryPoint - Interface in org.springframework.security.web.access.channel: Deprecated.
please use HttpsRedirectFilter and its associated PortMapper
ChannelProcessingFilter - Class in org.springframework.security.web.access.channel: Deprecated.
see HttpsRedirectFilter
ChannelProcessingFilter() - Constructor for class org.springframework.security.web.access.channel.ChannelProcessingFilter: Deprecated.
ChannelProcessor - Interface in org.springframework.security.web.access.channel: Deprecated.
no replacement is planned, though consider using a custom RequestMatcher for any sophisticated decision-making
ChannelSecurityInterceptor - Class in org.springframework.security.messaging.access.intercept: Deprecated.
Use AuthorizationChannelInterceptor instead
ChannelSecurityInterceptor(MessageSecurityMetadataSource) - Constructor for class org.springframework.security.messaging.access.intercept.ChannelSecurityInterceptor: Deprecated.

Creates a new instance
checkAllowIfAllAbstainDecisions() - Method in class org.springframework.security.access.vote.AbstractAccessDecisionManager: Deprecated.
commence(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.access.channel.AbstractRetryEntryPoint: Deprecated.
commence(HttpServletRequest, HttpServletResponse) - Method in interface org.springframework.security.web.access.channel.ChannelEntryPoint: Deprecated.

Commences a secure channel.
ConfigAttribute - Interface in org.springframework.security.access: Deprecated.
In modern Spring Security APIs, each API manages its own configuration context. As such there is no direct replacement for this interface. In the case of method security, please see SecurityAnnotationScanner and AuthorizationManager. In the case of channel security, please see HttpsRedirectFilter. In the case of web security, please see AuthorizationManager.
ConsensusBased - Class in org.springframework.security.access.vote: Deprecated.
Use AuthorizationManager instead
ConsensusBased(List<AccessDecisionVoter<?>>) - Constructor for class org.springframework.security.access.vote.ConsensusBased: Deprecated.
createExpressionMessageMetadataSource(LinkedHashMap<MessageMatcher<?>, String>) - Static method in class org.springframework.security.messaging.access.expression.ExpressionBasedMessageSecurityMetadataSourceFactory: Deprecated.

Create a MessageSecurityMetadataSource that uses MessageMatcher mapped to Spring Expressions.
createExpressionMessageMetadataSource(LinkedHashMap<MessageMatcher<?>, String>, SecurityExpressionHandler<Message<Object>>) - Static method in class org.springframework.security.messaging.access.expression.ExpressionBasedMessageSecurityMetadataSourceFactory: Deprecated.

Create a MessageSecurityMetadataSource that uses MessageMatcher mapped to Spring Expressions.
createList(String...) - Static method in class org.springframework.security.access.SecurityConfig: Deprecated.
createListFromCommaDelimitedString(String) - Static method in class org.springframework.security.access.SecurityConfig: Deprecated.
createPostInvocationAttribute(String, String) - Method in interface org.springframework.security.access.prepost.PrePostInvocationAttributeFactory: Deprecated.
createPostInvocationAttribute(String, String) - Method in class org.springframework.security.access.expression.method.ExpressionBasedAnnotationAttributeFactory: Deprecated.
createPreInvocationAttribute(String, String, String) - Method in interface org.springframework.security.access.prepost.PrePostInvocationAttributeFactory: Deprecated.
createPreInvocationAttribute(String, String, String) - Method in class org.springframework.security.access.expression.method.ExpressionBasedAnnotationAttributeFactory: Deprecated.
createSecurityExpressionRoot(Authentication, FilterInvocation) - Method in class org.springframework.security.web.access.expression.DefaultWebSecurityExpressionHandler

D

decide(Authentication, Object, Collection<ConfigAttribute>) - Method in interface org.springframework.security.access.AccessDecisionManager: Deprecated.

Resolves an access control decision for the passed parameters.
decide(Authentication, Object, Collection<ConfigAttribute>) - Method in class org.springframework.security.access.vote.AffirmativeBased: Deprecated.

This concrete implementation simply polls all configured AccessDecisionVoters and grants access if any AccessDecisionVoter voted affirmatively.
decide(Authentication, Object, Collection<ConfigAttribute>) - Method in class org.springframework.security.access.vote.ConsensusBased: Deprecated.

This concrete implementation simply polls all configured AccessDecisionVoters and upon completion determines the consensus of granted against denied responses.
decide(Authentication, Object, Collection<ConfigAttribute>) - Method in class org.springframework.security.access.vote.UnanimousBased: Deprecated.

This concrete implementation polls all configured AccessDecisionVoters for each ConfigAttribute and grants access if only grant (or abstain) votes were received.
decide(Authentication, Object, Collection<ConfigAttribute>, Object) - Method in interface org.springframework.security.access.AfterInvocationProvider: Deprecated.
decide(Authentication, Object, Collection<ConfigAttribute>, Object) - Method in interface org.springframework.security.access.intercept.AfterInvocationManager: Deprecated.

Given the details of a secure object invocation including its returned Object, make an access control decision or optionally modify the returned Object.
decide(Authentication, Object, Collection<ConfigAttribute>, Object) - Method in class org.springframework.security.access.intercept.AfterInvocationProviderManager: Deprecated.
decide(Authentication, Object, Collection<ConfigAttribute>, Object) - Method in class org.springframework.security.access.prepost.PostInvocationAdviceProvider: Deprecated.
decide(Authentication, Object, Collection<ConfigAttribute>, Object) - Method in class org.springframework.security.acls.afterinvocation.AclEntryAfterInvocationCollectionFilteringProvider: Deprecated.
decide(Authentication, Object, Collection<ConfigAttribute>, Object) - Method in class org.springframework.security.acls.afterinvocation.AclEntryAfterInvocationProvider: Deprecated.
decide(FilterInvocation, Collection<ConfigAttribute>) - Method in interface org.springframework.security.web.access.channel.ChannelDecisionManager: Deprecated.

Decided whether the presented FilterInvocation provides the appropriate level of channel security based on the requested list of ConfigAttributes.
decide(FilterInvocation, Collection<ConfigAttribute>) - Method in class org.springframework.security.web.access.channel.ChannelDecisionManagerImpl: Deprecated.
decide(FilterInvocation, Collection<ConfigAttribute>) - Method in interface org.springframework.security.web.access.channel.ChannelProcessor: Deprecated.

Decided whether the presented FilterInvocation provides the appropriate level of channel security based on the requested list of ConfigAttributes.
decide(FilterInvocation, Collection<ConfigAttribute>) - Method in class org.springframework.security.web.access.channel.InsecureChannelProcessor: Deprecated.
decide(FilterInvocation, Collection<ConfigAttribute>) - Method in class org.springframework.security.web.access.channel.SecureChannelProcessor: Deprecated.
DefaultFilterInvocationSecurityMetadataSource - Class in org.springframework.security.web.access.intercept: Deprecated.
In modern Spring Security APIs, each API manages its own configuration context. As such there is no direct replacement for this interface. In the case of method security, please see SecurityAnnotationScanner and AuthorizationManager. In the case of channel security, please see HttpsRedirectFilter. In the case of web security, please see AuthorizationManager.
DefaultFilterInvocationSecurityMetadataSource(LinkedHashMap<RequestMatcher, Collection<ConfigAttribute>>) - Constructor for class org.springframework.security.web.access.intercept.DefaultFilterInvocationSecurityMetadataSource: Deprecated.

Sets the internal request map from the supplied map.
DefaultMessageSecurityMetadataSource - Class in org.springframework.security.messaging.access.intercept: Deprecated.
Use MessageMatcherDelegatingAuthorizationManager instead
DefaultMessageSecurityMetadataSource(LinkedHashMap<MessageMatcher<?>, Collection<ConfigAttribute>>) - Constructor for class org.springframework.security.messaging.access.intercept.DefaultMessageSecurityMetadataSource: Deprecated.
DefaultWebInvocationPrivilegeEvaluator - Class in org.springframework.security.web.access: Deprecated.
Use AuthorizationManagerWebInvocationPrivilegeEvaluator instead
DefaultWebInvocationPrivilegeEvaluator(AbstractSecurityInterceptor) - Constructor for class org.springframework.security.web.access.DefaultWebInvocationPrivilegeEvaluator: Deprecated.
DefaultWebSecurityExpressionHandler - Class in org.springframework.security.web.access.expression
DefaultWebSecurityExpressionHandler() - Constructor for class org.springframework.security.web.access.expression.DefaultWebSecurityExpressionHandler
DelegatingMethodSecurityMetadataSource - Class in org.springframework.security.access.method: Deprecated.
Use the use-authorization-manager attribute for <method-security> and <intercept-methods> instead or use annotation-based or AuthorizationManager-based authorization
DelegatingMethodSecurityMetadataSource(List<MethodSecurityMetadataSource>) - Constructor for class org.springframework.security.access.method.DelegatingMethodSecurityMetadataSource: Deprecated.
DENY_ALL_ATTRIBUTE - Static variable in class org.springframework.security.access.annotation.Jsr250SecurityConfig: Deprecated.
destroy() - Method in class org.springframework.security.web.access.intercept.FilterSecurityInterceptor: Deprecated.

Not used (we rely on IoC container lifecycle services instead)
doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class org.springframework.security.web.access.channel.ChannelProcessingFilter: Deprecated.
doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class org.springframework.security.web.access.intercept.FilterSecurityInterceptor: Deprecated.

Method that is actually called by the filter chain.

E

equals(Object) - Method in class org.springframework.security.access.SecurityConfig: Deprecated.
ExpressionBasedAnnotationAttributeFactory - Class in org.springframework.security.access.expression.method: Deprecated.
Use AuthorizationManager interceptors instead
ExpressionBasedAnnotationAttributeFactory(MethodSecurityExpressionHandler) - Constructor for class org.springframework.security.access.expression.method.ExpressionBasedAnnotationAttributeFactory: Deprecated.
ExpressionBasedFilterInvocationSecurityMetadataSource - Class in org.springframework.security.web.access.expression: Deprecated.
In modern Spring Security APIs, each API manages its own configuration context. As such there is no direct replacement for this interface. In the case of method security, please see SecurityAnnotationScanner and AuthorizationManager. In the case of channel security, please see HttpsRedirectFilter. In the case of web security, please see AuthorizationManager.
ExpressionBasedFilterInvocationSecurityMetadataSource(LinkedHashMap<RequestMatcher, Collection<ConfigAttribute>>, SecurityExpressionHandler<FilterInvocation>) - Constructor for class org.springframework.security.web.access.expression.ExpressionBasedFilterInvocationSecurityMetadataSource: Deprecated.
ExpressionBasedMessageSecurityMetadataSourceFactory - Class in org.springframework.security.messaging.access.expression: Deprecated.
Use MessageMatcherDelegatingAuthorizationManager instead
ExpressionBasedPostInvocationAdvice - Class in org.springframework.security.access.expression.method: Deprecated.
Use AuthorizationManagerAfterMethodInterceptor instead
ExpressionBasedPostInvocationAdvice(MethodSecurityExpressionHandler) - Constructor for class org.springframework.security.access.expression.method.ExpressionBasedPostInvocationAdvice: Deprecated.
ExpressionBasedPreInvocationAdvice - Class in org.springframework.security.access.expression.method: Deprecated.
Use AuthorizationManagerAfterMethodInterceptor instead
ExpressionBasedPreInvocationAdvice() - Constructor for class org.springframework.security.access.expression.method.ExpressionBasedPreInvocationAdvice: Deprecated.
extractAttributes(A) - Method in interface org.springframework.security.access.annotation.AnnotationMetadataExtractor: Deprecated.

F

FilterInvocationSecurityMetadataSource - Interface in org.springframework.security.web.access.intercept: Deprecated.
In modern Spring Security APIs, each API manages its own configuration context. As such there is no direct replacement for this interface. In the case of method security, please see SecurityAnnotationScanner and AuthorizationManager. In the case of channel security, please see HttpsRedirectFilter. In the case of web security, please see AuthorizationManager.
FilterSecurityInterceptor - Class in org.springframework.security.web.access.intercept: Deprecated.
Use AuthorizationFilter instead
FilterSecurityInterceptor() - Constructor for class org.springframework.security.web.access.intercept.FilterSecurityInterceptor: Deprecated.
finallyInvocation(InterceptorStatusToken) - Method in class org.springframework.security.access.intercept.AbstractSecurityInterceptor: Deprecated.

Cleans up the work of the AbstractSecurityInterceptor after the secure object invocation has been completed.
findAttributes(Class<?>) - Method in class org.springframework.security.access.annotation.Jsr250MethodSecurityMetadataSource: Deprecated.
findAttributes(Class<?>) - Method in class org.springframework.security.access.annotation.SecuredAnnotationSecurityMetadataSource: Deprecated.
findAttributes(Class<?>) - Method in class org.springframework.security.access.method.AbstractFallbackMethodSecurityMetadataSource: Deprecated.

Obtains the security metadata registered against the specified class.
findAttributes(Class<?>) - Method in class org.springframework.security.access.method.MapBasedMethodSecurityMetadataSource: Deprecated.

Implementation does not support class-level attributes.
findAttributes(Method, Class<?>) - Method in class org.springframework.security.access.method.AbstractFallbackMethodSecurityMetadataSource: Deprecated.

Obtains the security metadata applicable to the specified method invocation.
findAttributes(Method, Class<?>) - Method in class org.springframework.security.access.annotation.Jsr250MethodSecurityMetadataSource: Deprecated.
findAttributes(Method, Class<?>) - Method in class org.springframework.security.access.annotation.SecuredAnnotationSecurityMetadataSource: Deprecated.
findAttributes(Method, Class<?>) - Method in class org.springframework.security.access.method.MapBasedMethodSecurityMetadataSource: Deprecated.

Will walk the method inheritance tree to find the most specific declaration applicable.

G

getAccessDecisionManager() - Method in class org.springframework.security.access.intercept.AbstractSecurityInterceptor: Deprecated.
getAccessDeniedException() - Method in class org.springframework.security.access.event.AuthorizationFailureEvent: Deprecated.
getAdvice() - Method in class org.springframework.security.access.intercept.aopalliance.MethodSecurityMetadataSourceAdvisor: Deprecated.
getAfterInvocationManager() - Method in class org.springframework.security.access.intercept.AbstractSecurityInterceptor: Deprecated.
getAllConfigAttributes() - Method in class org.springframework.security.access.annotation.Jsr250MethodSecurityMetadataSource: Deprecated.
getAllConfigAttributes() - Method in class org.springframework.security.access.annotation.SecuredAnnotationSecurityMetadataSource: Deprecated.
getAllConfigAttributes() - Method in class org.springframework.security.access.method.DelegatingMethodSecurityMetadataSource: Deprecated.
getAllConfigAttributes() - Method in class org.springframework.security.access.method.MapBasedMethodSecurityMetadataSource: Deprecated.

Obtains the configuration attributes explicitly defined against this bean.
getAllConfigAttributes() - Method in class org.springframework.security.access.prepost.PrePostAnnotationSecurityMetadataSource: Deprecated.
getAllConfigAttributes() - Method in interface org.springframework.security.access.SecurityMetadataSource: Deprecated.

If available, returns all of the ConfigAttributes defined by the implementing class.
getAllConfigAttributes() - Method in class org.springframework.security.messaging.access.intercept.DefaultMessageSecurityMetadataSource: Deprecated.
getAllConfigAttributes() - Method in class org.springframework.security.web.access.intercept.DefaultFilterInvocationSecurityMetadataSource: Deprecated.
getArguments() - Method in class org.springframework.security.access.intercept.aspectj.MethodInvocationAdapter: Deprecated.
getAttribute() - Method in interface org.springframework.security.access.ConfigAttribute: Deprecated.

If the ConfigAttribute can be represented as a String and that String is sufficient in precision to be relied upon as a configuration parameter by a RunAsManager, AccessDecisionManager or AccessDecisionManager delegate, this method should return such a String.
getAttribute() - Method in class org.springframework.security.access.SecurityConfig: Deprecated.
getAttributes() - Method in class org.springframework.security.access.intercept.InterceptorStatusToken: Deprecated.
getAttributes(Object) - Method in class org.springframework.security.access.method.AbstractMethodSecurityMetadataSource: Deprecated.
getAttributes(Object) - Method in interface org.springframework.security.access.SecurityMetadataSource: Deprecated.

Accesses the ConfigAttributes that apply to a given secure object.
getAttributes(Object) - Method in class org.springframework.security.messaging.access.intercept.DefaultMessageSecurityMetadataSource: Deprecated.
getAttributes(Object) - Method in class org.springframework.security.web.access.intercept.DefaultFilterInvocationSecurityMetadataSource: Deprecated.
getAttributes(Method, Class<?>) - Method in class org.springframework.security.access.method.AbstractFallbackMethodSecurityMetadataSource: Deprecated.
getAttributes(Method, Class<?>) - Method in class org.springframework.security.access.method.DelegatingMethodSecurityMetadataSource: Deprecated.
getAttributes(Method, Class<?>) - Method in interface org.springframework.security.access.method.MethodSecurityMetadataSource: Deprecated.
getAttributes(Method, Class<?>) - Method in class org.springframework.security.access.prepost.PrePostAnnotationSecurityMetadataSource: Deprecated.
getAuthentication() - Method in class org.springframework.security.access.event.AuthorizationFailureEvent: Deprecated.
getAuthentication() - Method in class org.springframework.security.access.event.AuthorizedEvent: Deprecated.
getAuthenticationManager() - Method in class org.springframework.security.access.intercept.AbstractSecurityInterceptor: Deprecated.
getChannelDecisionManager() - Method in class org.springframework.security.web.access.channel.ChannelProcessingFilter: Deprecated.
getChannelProcessors() - Method in class org.springframework.security.web.access.channel.ChannelDecisionManagerImpl: Deprecated.
getConfigAttributes() - Method in class org.springframework.security.access.event.AuthenticationCredentialsNotFoundEvent: Deprecated.
getConfigAttributes() - Method in class org.springframework.security.access.event.AuthorizationFailureEvent: Deprecated.
getConfigAttributes() - Method in class org.springframework.security.access.event.AuthorizedEvent: Deprecated.
getCredentials() - Method in class org.springframework.security.access.intercept.RunAsUserToken: Deprecated.
getCredentialsNotFoundException() - Method in class org.springframework.security.access.event.AuthenticationCredentialsNotFoundEvent: Deprecated.
getDecisionVoters() - Method in class org.springframework.security.access.vote.AbstractAccessDecisionManager: Deprecated.
getDomainObjectInstance(MethodInvocation) - Method in class org.springframework.security.access.vote.AbstractAclVoter: Deprecated.
getEntryPoint() - Method in class org.springframework.security.web.access.channel.InsecureChannelProcessor: Deprecated.
getEntryPoint() - Method in class org.springframework.security.web.access.channel.SecureChannelProcessor: Deprecated.
getInsecureKeyword() - Method in class org.springframework.security.web.access.channel.InsecureChannelProcessor: Deprecated.
getInternalMethod() - Method in class org.springframework.security.acls.AclEntryVoter: Deprecated.

Optionally specifies a method of the domain object that will be used to obtain a contained domain object.
getKey() - Method in class org.springframework.security.access.intercept.RunAsImplAuthenticationProvider: Deprecated.
getKey() - Method in class org.springframework.security.access.intercept.RunAsManagerImpl: Deprecated.
getKeyHash() - Method in class org.springframework.security.access.intercept.RunAsUserToken: Deprecated.
getMappedPort(Integer) - Method in class org.springframework.security.web.access.channel.AbstractRetryEntryPoint: Deprecated.
getMappedPort(Integer) - Method in class org.springframework.security.web.access.channel.RetryWithHttpEntryPoint: Deprecated.
getMappedPort(Integer) - Method in class org.springframework.security.web.access.channel.RetryWithHttpsEntryPoint: Deprecated.
getMethod() - Method in class org.springframework.security.access.intercept.aspectj.MethodInvocationAdapter: Deprecated.
getMethodMapSize() - Method in class org.springframework.security.access.method.MapBasedMethodSecurityMetadataSource: Deprecated.
getMethodSecurityMetadataSources() - Method in class org.springframework.security.access.method.DelegatingMethodSecurityMetadataSource: Deprecated.
getOriginalAuthentication() - Method in class org.springframework.security.access.intercept.RunAsUserToken: Deprecated.
getPointcut() - Method in class org.springframework.security.access.intercept.aopalliance.MethodSecurityMetadataSourceAdvisor: Deprecated.
getPortMapper() - Method in class org.springframework.security.web.access.channel.AbstractRetryEntryPoint: Deprecated.
getPrincipal() - Method in class org.springframework.security.access.intercept.RunAsUserToken: Deprecated.
getProcessConfigAttribute() - Method in class org.springframework.security.acls.AclEntryVoter: Deprecated.
getProcessDomainObjectClass() - Method in class org.springframework.security.access.vote.AbstractAclVoter: Deprecated.
getProcessDomainObjectClass() - Method in class org.springframework.security.acls.afterinvocation.AbstractAclProvider: Deprecated.
getProviders() - Method in class org.springframework.security.access.intercept.AfterInvocationProviderManager: Deprecated.
getRedirectStrategy() - Method in class org.springframework.security.web.access.channel.AbstractRetryEntryPoint: Deprecated.
getRolePrefix() - Method in class org.springframework.security.access.intercept.RunAsManagerImpl: Deprecated.
getRolePrefix() - Method in class org.springframework.security.access.vote.RoleVoter: Deprecated.
getRunAsManager() - Method in class org.springframework.security.access.intercept.AbstractSecurityInterceptor: Deprecated.
getSecureKeyword() - Method in class org.springframework.security.web.access.channel.SecureChannelProcessor: Deprecated.
getSecureObject() - Method in class org.springframework.security.access.intercept.InterceptorStatusToken: Deprecated.
getSecureObjectClass() - Method in class org.springframework.security.access.intercept.AbstractSecurityInterceptor: Deprecated.

Indicates the type of secure objects the subclass will be presenting to the abstract parent for processing.
getSecureObjectClass() - Method in class org.springframework.security.access.intercept.aopalliance.MethodSecurityInterceptor: Deprecated.
getSecureObjectClass() - Method in class org.springframework.security.messaging.access.intercept.ChannelSecurityInterceptor: Deprecated.
getSecureObjectClass() - Method in class org.springframework.security.web.access.intercept.FilterSecurityInterceptor: Deprecated.
getSecurityContext() - Method in class org.springframework.security.access.intercept.InterceptorStatusToken: Deprecated.
getSecurityMetadataSource() - Method in class org.springframework.security.access.intercept.aopalliance.MethodSecurityInterceptor: Deprecated.
getSecurityMetadataSource() - Method in class org.springframework.security.web.access.channel.ChannelProcessingFilter: Deprecated.
getSecurityMetadataSource() - Method in class org.springframework.security.web.access.intercept.FilterSecurityInterceptor: Deprecated.
getStaticPart() - Method in class org.springframework.security.access.intercept.aspectj.MethodInvocationAdapter: Deprecated.
getThis() - Method in class org.springframework.security.access.intercept.aspectj.MethodInvocationAdapter: Deprecated.

H

hashCode() - Method in class org.springframework.security.access.SecurityConfig: Deprecated.
hasPermission(Authentication, Object) - Method in class org.springframework.security.acls.afterinvocation.AbstractAclProvider: Deprecated.

I

init(FilterConfig) - Method in class org.springframework.security.web.access.intercept.FilterSecurityInterceptor: Deprecated.

Not used (we rely on IoC container lifecycle services instead)
InsecureChannelProcessor - Class in org.springframework.security.web.access.channel: Deprecated.
no replacement is planned, though consider using a custom RequestMatcher for any sophisticated decision-making
InsecureChannelProcessor() - Constructor for class org.springframework.security.web.access.channel.InsecureChannelProcessor: Deprecated.
InterceptorStatusToken - Class in org.springframework.security.access.intercept: Deprecated.
Use delegation with AuthorizationManager
InterceptorStatusToken(SecurityContext, boolean, Collection<ConfigAttribute>, Object) - Constructor for class org.springframework.security.access.intercept.InterceptorStatusToken: Deprecated.
invoke(MethodInvocation) - Method in class org.springframework.security.access.intercept.aopalliance.MethodSecurityInterceptor: Deprecated.

This method should be used to enforce security on a MethodInvocation.
invoke(MethodInvocation) - Method in class org.springframework.security.access.prepost.PrePostAdviceReactiveMethodInterceptor: Deprecated.
invoke(JoinPoint) - Method in class org.springframework.security.access.intercept.aspectj.AspectJMethodSecurityInterceptor: Deprecated.

Method that is suitable for user with @Aspect notation.
invoke(JoinPoint, AspectJCallback) - Method in class org.springframework.security.access.intercept.aspectj.AspectJMethodSecurityInterceptor: Deprecated.

Method that is suitable for user with traditional AspectJ-code aspects.
invoke(FilterInvocation) - Method in class org.springframework.security.web.access.intercept.FilterSecurityInterceptor: Deprecated.
IS_AUTHENTICATED_ANONYMOUSLY - Static variable in class org.springframework.security.access.vote.AuthenticatedVoter: Deprecated.
IS_AUTHENTICATED_FULLY - Static variable in class org.springframework.security.access.vote.AuthenticatedVoter: Deprecated.
IS_AUTHENTICATED_REMEMBERED - Static variable in class org.springframework.security.access.vote.AuthenticatedVoter: Deprecated.
isAllowed(String, String, String, Authentication) - Method in class org.springframework.security.web.access.DefaultWebInvocationPrivilegeEvaluator: Deprecated.

Determines whether the user represented by the supplied Authentication object is allowed to invoke the supplied URI, with the given .
isAllowed(String, Authentication) - Method in class org.springframework.security.web.access.DefaultWebInvocationPrivilegeEvaluator: Deprecated.

Determines whether the user represented by the supplied Authentication object is allowed to invoke the supplied URI.
isAllowed(MethodInvocation, Authentication) - Method in class org.springframework.security.access.intercept.MethodInvocationPrivilegeEvaluator: Deprecated.
isAllowIfAllAbstainDecisions() - Method in class org.springframework.security.access.vote.AbstractAccessDecisionManager: Deprecated.
isAllowIfEqualGrantedDeniedDecisions() - Method in class org.springframework.security.access.vote.ConsensusBased: Deprecated.
isAlwaysReauthenticate() - Method in class org.springframework.security.access.intercept.AbstractSecurityInterceptor: Deprecated.
isContextHolderRefreshRequired() - Method in class org.springframework.security.access.intercept.InterceptorStatusToken: Deprecated.
isObserveOncePerRequest() - Method in class org.springframework.security.web.access.intercept.FilterSecurityInterceptor: Deprecated.

Indicates whether once-per-request handling will be observed.
isRejectPublicInvocations() - Method in class org.springframework.security.access.intercept.AbstractSecurityInterceptor: Deprecated.
isValidateConfigAttributes() - Method in class org.springframework.security.access.intercept.AbstractSecurityInterceptor: Deprecated.

J

Jsr250MethodSecurityMetadataSource - Class in org.springframework.security.access.annotation: Deprecated.
Use Jsr250AuthorizationManager instead
Jsr250MethodSecurityMetadataSource() - Constructor for class org.springframework.security.access.annotation.Jsr250MethodSecurityMetadataSource: Deprecated.
Jsr250SecurityConfig - Class in org.springframework.security.access.annotation: Deprecated.
Use AuthorizationManagerBeforeMethodInterceptor.jsr250() instead
Jsr250SecurityConfig(String) - Constructor for class org.springframework.security.access.annotation.Jsr250SecurityConfig: Deprecated.
Jsr250Voter - Class in org.springframework.security.access.annotation: Deprecated.
Use Jsr250AuthorizationManager instead
Jsr250Voter() - Constructor for class org.springframework.security.access.annotation.Jsr250Voter: Deprecated.

L

logger - Variable in class org.springframework.security.access.expression.method.ExpressionBasedPostInvocationAdvice: Deprecated.
logger - Variable in class org.springframework.security.access.intercept.AbstractSecurityInterceptor: Deprecated.
logger - Static variable in class org.springframework.security.access.intercept.AfterInvocationProviderManager: Deprecated.
logger - Static variable in class org.springframework.security.access.intercept.MethodInvocationPrivilegeEvaluator: Deprecated.
logger - Variable in class org.springframework.security.access.method.AbstractMethodSecurityMetadataSource: Deprecated.
logger - Variable in class org.springframework.security.access.prepost.PostInvocationAdviceProvider: Deprecated.
logger - Variable in class org.springframework.security.access.prepost.PreInvocationAuthorizationAdviceVoter: Deprecated.
logger - Variable in class org.springframework.security.access.vote.AbstractAccessDecisionManager: Deprecated.
logger - Static variable in class org.springframework.security.acls.afterinvocation.AclEntryAfterInvocationCollectionFilteringProvider: Deprecated.
logger - Static variable in class org.springframework.security.acls.afterinvocation.AclEntryAfterInvocationProvider: Deprecated.
logger - Variable in class org.springframework.security.web.access.channel.AbstractRetryEntryPoint: Deprecated.
logger - Static variable in class org.springframework.security.web.access.DefaultWebInvocationPrivilegeEvaluator: Deprecated.
logger - Variable in class org.springframework.security.web.access.intercept.DefaultFilterInvocationSecurityMetadataSource: Deprecated.
LoggerListener - Class in org.springframework.security.access.event: Deprecated.
Logging is now embedded in Spring Security components. If you need further logging, please consider using your own ApplicationListener
LoggerListener() - Constructor for class org.springframework.security.access.event.LoggerListener: Deprecated.

M

MapBasedMethodSecurityMetadataSource - Class in org.springframework.security.access.method: Deprecated.
Use the use-authorization-manager attribute for <method-security> and <intercept-methods> instead or use annotation-based or AuthorizationManager-based authorization
MapBasedMethodSecurityMetadataSource() - Constructor for class org.springframework.security.access.method.MapBasedMethodSecurityMetadataSource: Deprecated.
MapBasedMethodSecurityMetadataSource(Map<String, List<ConfigAttribute>>) - Constructor for class org.springframework.security.access.method.MapBasedMethodSecurityMetadataSource: Deprecated.

Creates the MapBasedMethodSecurityMetadataSource from a
MessageExpressionVoter<T> - Class in org.springframework.security.messaging.access.expression: Deprecated.
Use MessageMatcherDelegatingAuthorizationManager instead
MessageExpressionVoter() - Constructor for class org.springframework.security.messaging.access.expression.MessageExpressionVoter: Deprecated.
messages - Variable in class org.springframework.security.access.intercept.AbstractSecurityInterceptor: Deprecated.
messages - Variable in class org.springframework.security.access.intercept.RunAsImplAuthenticationProvider: Deprecated.
messages - Variable in class org.springframework.security.access.vote.AbstractAccessDecisionManager: Deprecated.
messages - Variable in class org.springframework.security.acls.afterinvocation.AclEntryAfterInvocationProvider: Deprecated.
MessageSecurityMetadataSource - Interface in org.springframework.security.messaging.access.intercept: Deprecated.
Use MessageMatcherDelegatingAuthorizationManager instead
MethodInvocationAdapter - Class in org.springframework.security.access.intercept.aspectj: Deprecated.
This class will be removed from the public API. See `JoinPointMethodInvocation` in `spring-security-aspects` for its replacement
MethodInvocationPrivilegeEvaluator - Class in org.springframework.security.access.intercept: Deprecated.
Use AuthorizationManager instead
MethodInvocationPrivilegeEvaluator() - Constructor for class org.springframework.security.access.intercept.MethodInvocationPrivilegeEvaluator: Deprecated.
methodMap - Variable in class org.springframework.security.access.method.MapBasedMethodSecurityMetadataSource: Deprecated.

Map from RegisteredMethod to ConfigAttribute list
MethodSecurityInterceptor - Class in org.springframework.security.access.intercept.aopalliance: Deprecated.
Please use AuthorizationManagerBeforeMethodInterceptor and AuthorizationManagerAfterMethodInterceptor instead
MethodSecurityInterceptor() - Constructor for class org.springframework.security.access.intercept.aopalliance.MethodSecurityInterceptor: Deprecated.
MethodSecurityMetadataSource - Interface in org.springframework.security.access.method: Deprecated.
Use the use-authorization-manager attribute for <method-security> and <intercept-methods> instead or use annotation-based or AuthorizationManager-based authorization
MethodSecurityMetadataSourceAdvisor - Class in org.springframework.security.access.intercept.aopalliance: Deprecated.
Use EnableMethodSecurity or publish interceptors directly
MethodSecurityMetadataSourceAdvisor(String, MethodSecurityMetadataSource, String) - Constructor for class org.springframework.security.access.intercept.aopalliance.MethodSecurityMetadataSourceAdvisor: Deprecated.

Alternative constructor for situations where we want the advisor decoupled from the advice.

O

objectIdentityRetrievalStrategy - Variable in class org.springframework.security.acls.afterinvocation.AbstractAclProvider: Deprecated.
obtainSecurityMetadataSource() - Method in class org.springframework.security.access.intercept.AbstractSecurityInterceptor: Deprecated.
obtainSecurityMetadataSource() - Method in class org.springframework.security.access.intercept.aopalliance.MethodSecurityInterceptor: Deprecated.
obtainSecurityMetadataSource() - Method in class org.springframework.security.messaging.access.intercept.ChannelSecurityInterceptor: Deprecated.
obtainSecurityMetadataSource() - Method in class org.springframework.security.web.access.intercept.FilterSecurityInterceptor: Deprecated.
onApplicationEvent(AbstractAuthorizationEvent) - Method in class org.springframework.security.access.event.LoggerListener: Deprecated.
org.springframework.security.access - package org.springframework.security.access
org.springframework.security.access.annotation - package org.springframework.security.access.annotation
org.springframework.security.access.event - package org.springframework.security.access.event: Authorization event and listener classes.
org.springframework.security.access.expression.method - package org.springframework.security.access.expression.method
org.springframework.security.access.intercept - package org.springframework.security.access.intercept: Abstract level security interception classes which are responsible for enforcing the configured security constraints for a secure object.
org.springframework.security.access.intercept.aopalliance - package org.springframework.security.access.intercept.aopalliance: Enforces security for AOP Alliance MethodInvocations, such as via Spring AOP.
org.springframework.security.access.intercept.aspectj - package org.springframework.security.access.intercept.aspectj: Enforces security for AspectJ JointPoints, delegating secure object callbacks to the calling aspect.
org.springframework.security.access.method - package org.springframework.security.access.method: Provides SecurityMetadataSource implementations for securing Java method invocations via different AOP libraries.
org.springframework.security.access.prepost - package org.springframework.security.access.prepost
org.springframework.security.access.vote - package org.springframework.security.access.vote: Implements a vote-based approach to authorization decisions.
org.springframework.security.acls - package org.springframework.security.acls
org.springframework.security.acls.afterinvocation - package org.springframework.security.acls.afterinvocation: After-invocation providers for collection and array filtering.
org.springframework.security.messaging.access.expression - package org.springframework.security.messaging.access.expression
org.springframework.security.messaging.access.intercept - package org.springframework.security.messaging.access.intercept
org.springframework.security.web.access - package org.springframework.security.web.access
org.springframework.security.web.access.channel - package org.springframework.security.web.access.channel: Classes that ensure web requests are received over required transport channels.
org.springframework.security.web.access.expression - package org.springframework.security.web.access.expression
org.springframework.security.web.access.intercept - package org.springframework.security.web.access.intercept

P

P - Annotation Interface in org.springframework.security.access.method: Deprecated.
use @{code org.springframework.security.core.parameters.P}
PERMIT_ALL_ATTRIBUTE - Static variable in class org.springframework.security.access.annotation.Jsr250SecurityConfig: Deprecated.
PostInvocationAdviceProvider - Class in org.springframework.security.access.prepost: Deprecated.
Use AuthorizationManagerAfterMethodInterceptor instead
PostInvocationAdviceProvider(PostInvocationAuthorizationAdvice) - Constructor for class org.springframework.security.access.prepost.PostInvocationAdviceProvider: Deprecated.
PostInvocationAttribute - Interface in org.springframework.security.access.prepost: Deprecated.
Use AuthorizationManagerAfterMethodInterceptor instead
PostInvocationAuthorizationAdvice - Interface in org.springframework.security.access.prepost: Deprecated.
Use AuthorizationManagerAfterMethodInterceptor instead
postReceive(Message<?>, MessageChannel) - Method in class org.springframework.security.messaging.access.intercept.ChannelSecurityInterceptor: Deprecated.
postSend(Message<?>, MessageChannel, boolean) - Method in class org.springframework.security.messaging.access.intercept.ChannelSecurityInterceptor: Deprecated.
PreInvocationAttribute - Interface in org.springframework.security.access.prepost: Deprecated.
Use AuthorizationManagerBeforeMethodInterceptor instead
PreInvocationAuthorizationAdvice - Interface in org.springframework.security.access.prepost: Deprecated.
Use AuthorizationManagerBeforeMethodInterceptor instead
PreInvocationAuthorizationAdviceVoter - Class in org.springframework.security.access.prepost: Deprecated.
Use AuthorizationManagerBeforeMethodInterceptor instead
PreInvocationAuthorizationAdviceVoter(PreInvocationAuthorizationAdvice) - Constructor for class org.springframework.security.access.prepost.PreInvocationAuthorizationAdviceVoter: Deprecated.
PrePostAdviceReactiveMethodInterceptor - Class in org.springframework.security.access.prepost: Deprecated.
Use AuthorizationManagerBeforeReactiveMethodInterceptor or AuthorizationManagerAfterReactiveMethodInterceptor
PrePostAdviceReactiveMethodInterceptor(MethodSecurityMetadataSource, PreInvocationAuthorizationAdvice, PostInvocationAuthorizationAdvice) - Constructor for class org.springframework.security.access.prepost.PrePostAdviceReactiveMethodInterceptor: Deprecated.

Creates a new instance
PrePostAnnotationSecurityMetadataSource - Class in org.springframework.security.access.prepost: Deprecated.
Use PreAuthorizeAuthorizationManager and PostAuthorizeAuthorizationManager instead
PrePostAnnotationSecurityMetadataSource(PrePostInvocationAttributeFactory) - Constructor for class org.springframework.security.access.prepost.PrePostAnnotationSecurityMetadataSource: Deprecated.
PrePostInvocationAttributeFactory - Interface in org.springframework.security.access.prepost: Deprecated.
Use delegation with AuthorizationManager
preReceive(MessageChannel) - Method in class org.springframework.security.messaging.access.intercept.ChannelSecurityInterceptor: Deprecated.
preSend(Message<?>, MessageChannel) - Method in class org.springframework.security.messaging.access.intercept.ChannelSecurityInterceptor: Deprecated.
proceed() - Method in class org.springframework.security.access.intercept.aspectj.MethodInvocationAdapter: Deprecated.
proceedWithObject() - Method in interface org.springframework.security.access.intercept.aspectj.AspectJCallback: Deprecated.
processConfigAttribute - Variable in class org.springframework.security.acls.afterinvocation.AbstractAclProvider: Deprecated.
processDomainObjectClass - Variable in class org.springframework.security.acls.afterinvocation.AbstractAclProvider: Deprecated.
PublicInvocationEvent - Class in org.springframework.security.access.event: Deprecated.
Only used by now-deprecated classes. Consider EventObject.getSource() to deduce public invocations.
PublicInvocationEvent(Object) - Constructor for class org.springframework.security.access.event.PublicInvocationEvent: Deprecated.

Construct the event, passing in the public secure object.

R

requirePermission - Variable in class org.springframework.security.acls.afterinvocation.AbstractAclProvider: Deprecated.
RetryWithHttpEntryPoint - Class in org.springframework.security.web.access.channel: Deprecated.
please use HttpsRedirectFilter and its associated PortMapper
RetryWithHttpEntryPoint() - Constructor for class org.springframework.security.web.access.channel.RetryWithHttpEntryPoint: Deprecated.
RetryWithHttpsEntryPoint - Class in org.springframework.security.web.access.channel: Deprecated.
please use HttpsRedirectFilter and its associated PortMapper
RetryWithHttpsEntryPoint() - Constructor for class org.springframework.security.web.access.channel.RetryWithHttpsEntryPoint: Deprecated.
RoleHierarchyVoter - Class in org.springframework.security.access.vote: Deprecated.
Use AuthorityAuthorizationManager.setRoleHierarchy(org.springframework.security.access.hierarchicalroles.RoleHierarchy) instead
RoleHierarchyVoter(RoleHierarchy) - Constructor for class org.springframework.security.access.vote.RoleHierarchyVoter: Deprecated.
RoleVoter - Class in org.springframework.security.access.vote: Deprecated.
Use AuthorityAuthorizationManager instead
RoleVoter() - Constructor for class org.springframework.security.access.vote.RoleVoter: Deprecated.
RunAsImplAuthenticationProvider - Class in org.springframework.security.access.intercept: Deprecated.
Authentication is now separated from authorization in Spring Security. This class is only used by now-deprecated components. There is not yet an equivalent replacement in Spring Security.
RunAsImplAuthenticationProvider() - Constructor for class org.springframework.security.access.intercept.RunAsImplAuthenticationProvider: Deprecated.
RunAsManager - Interface in org.springframework.security.access.intercept: Deprecated.
Authentication is now separated from authorization in Spring Security. This class is only used by now-deprecated components. There is not yet an equivalent replacement in Spring Security.
RunAsManagerImpl - Class in org.springframework.security.access.intercept: Deprecated.
Authentication is now separated from authorization in Spring Security. This class is only used by now-deprecated components. There is not yet an equivalent replacement in Spring Security.
RunAsManagerImpl() - Constructor for class org.springframework.security.access.intercept.RunAsManagerImpl: Deprecated.
RunAsUserToken - Class in org.springframework.security.access.intercept: Deprecated.
Authentication is now separated from authorization in Spring Security. This class is only used by now-deprecated components. There is not yet an equivalent replacement in Spring Security.
RunAsUserToken(String, Object, Object, Collection<? extends GrantedAuthority>, Class<? extends Authentication>) - Constructor for class org.springframework.security.access.intercept.RunAsUserToken: Deprecated.

S

SecureChannelProcessor - Class in org.springframework.security.web.access.channel: Deprecated.
no replacement is planned, though consider using a custom RequestMatcher for any sophisticated decision-making
SecureChannelProcessor() - Constructor for class org.springframework.security.web.access.channel.SecureChannelProcessor: Deprecated.
SecuredAnnotationSecurityMetadataSource - Class in org.springframework.security.access.annotation: Deprecated.
Use AuthorizationManagerBeforeMethodInterceptor.secured()
SecuredAnnotationSecurityMetadataSource() - Constructor for class org.springframework.security.access.annotation.SecuredAnnotationSecurityMetadataSource: Deprecated.
SecuredAnnotationSecurityMetadataSource(AnnotationMetadataExtractor) - Constructor for class org.springframework.security.access.annotation.SecuredAnnotationSecurityMetadataSource: Deprecated.
SecurityConfig - Class in org.springframework.security.access: Deprecated.
In modern Spring Security APIs, each API manages its own configuration context. As such there is no direct replacement for this interface. In the case of method security, please see SecurityAnnotationScanner and AuthorizationManager. In the case of channel security, please see HttpsRedirectFilter. In the case of web security, please see AuthorizationManager.
SecurityConfig(String) - Constructor for class org.springframework.security.access.SecurityConfig: Deprecated.
SecurityMetadataSource - Interface in org.springframework.security.access: Deprecated.
In modern Spring Security APIs, each API manages its own configuration context. As such there is no direct replacement for this interface. In the case of method security, please see SecurityAnnotationScanner and AuthorizationManager. In the case of channel security, please see HttpsRedirectFilter. In the case of web security, please see AuthorizationManager.
setAccessDecisionManager(AccessDecisionManager) - Method in class org.springframework.security.access.intercept.AbstractSecurityInterceptor: Deprecated.
setAfterInvocationManager(AfterInvocationManager) - Method in class org.springframework.security.access.intercept.AbstractSecurityInterceptor: Deprecated.
setAllowIfAllAbstainDecisions(boolean) - Method in class org.springframework.security.access.vote.AbstractAccessDecisionManager: Deprecated.
setAllowIfEqualGrantedDeniedDecisions(boolean) - Method in class org.springframework.security.access.vote.ConsensusBased: Deprecated.
setAlwaysReauthenticate(boolean) - Method in class org.springframework.security.access.intercept.AbstractSecurityInterceptor: Deprecated.

Indicates whether the AbstractSecurityInterceptor should ignore the Authentication.isAuthenticated() property.
setApplicationEventPublisher(ApplicationEventPublisher) - Method in class org.springframework.security.access.intercept.AbstractSecurityInterceptor: Deprecated.
setAuthenticationManager(AuthenticationManager) - Method in class org.springframework.security.access.intercept.AbstractSecurityInterceptor: Deprecated.
setAuthenticationTrustResolver(AuthenticationTrustResolver) - Method in class org.springframework.security.access.vote.AuthenticatedVoter: Deprecated.
setBeanClassLoader(ClassLoader) - Method in class org.springframework.security.access.method.MapBasedMethodSecurityMetadataSource: Deprecated.
setBeanFactory(BeanFactory) - Method in class org.springframework.security.access.intercept.aopalliance.MethodSecurityMetadataSourceAdvisor: Deprecated.
setChannelDecisionManager(ChannelDecisionManager) - Method in class org.springframework.security.web.access.channel.ChannelProcessingFilter: Deprecated.
setChannelProcessors(List<?>) - Method in class org.springframework.security.web.access.channel.ChannelDecisionManagerImpl: Deprecated.
setDefaultRolePrefix(String) - Method in class org.springframework.security.web.access.expression.DefaultWebSecurityExpressionHandler: Deprecated.
Use AbstractSecurityExpressionHandler.setAuthorizationManagerFactory(AuthorizationManagerFactory) instead
setDefaultRolePrefix(String) - Method in class org.springframework.security.access.annotation.Jsr250MethodSecurityMetadataSource: Deprecated.

Sets the default prefix to be added to RolesAllowed.
setEntryPoint(ChannelEntryPoint) - Method in class org.springframework.security.web.access.channel.InsecureChannelProcessor: Deprecated.
setEntryPoint(ChannelEntryPoint) - Method in class org.springframework.security.web.access.channel.SecureChannelProcessor: Deprecated.
setExpressionHandler(MethodSecurityExpressionHandler) - Method in class org.springframework.security.access.expression.method.ExpressionBasedPreInvocationAdvice: Deprecated.
setExpressionHandler(SecurityExpressionHandler<Message<T>>) - Method in class org.springframework.security.messaging.access.expression.MessageExpressionVoter: Deprecated.
setExpressionHandler(SecurityExpressionHandler<FilterInvocation>) - Method in class org.springframework.security.web.access.expression.WebExpressionVoter: Deprecated.
setInsecureKeyword(String) - Method in class org.springframework.security.web.access.channel.InsecureChannelProcessor: Deprecated.
setInternalMethod(String) - Method in class org.springframework.security.acls.AclEntryVoter: Deprecated.
setKey(String) - Method in class org.springframework.security.access.intercept.RunAsImplAuthenticationProvider: Deprecated.
setKey(String) - Method in class org.springframework.security.access.intercept.RunAsManagerImpl: Deprecated.
setMessageSource(MessageSource) - Method in class org.springframework.security.access.intercept.AbstractSecurityInterceptor: Deprecated.
setMessageSource(MessageSource) - Method in class org.springframework.security.access.intercept.RunAsImplAuthenticationProvider: Deprecated.
setMessageSource(MessageSource) - Method in class org.springframework.security.access.vote.AbstractAccessDecisionManager: Deprecated.
setMessageSource(MessageSource) - Method in class org.springframework.security.acls.afterinvocation.AclEntryAfterInvocationProvider: Deprecated.
setObjectIdentityRetrievalStrategy(ObjectIdentityRetrievalStrategy) - Method in class org.springframework.security.acls.AclEntryVoter: Deprecated.
setObjectIdentityRetrievalStrategy(ObjectIdentityRetrievalStrategy) - Method in class org.springframework.security.acls.afterinvocation.AbstractAclProvider: Deprecated.
setObserveOncePerRequest(boolean) - Method in class org.springframework.security.web.access.intercept.FilterSecurityInterceptor: Deprecated.
setPortMapper(PortMapper) - Method in class org.springframework.security.web.access.channel.AbstractRetryEntryPoint: Deprecated.
setProcessConfigAttribute(String) - Method in class org.springframework.security.acls.afterinvocation.AbstractAclProvider: Deprecated.
setProcessDomainObjectClass(Class<?>) - Method in class org.springframework.security.access.vote.AbstractAclVoter: Deprecated.
setProcessDomainObjectClass(Class<?>) - Method in class org.springframework.security.acls.afterinvocation.AbstractAclProvider: Deprecated.
setProviders(List<?>) - Method in class org.springframework.security.access.intercept.AfterInvocationProviderManager: Deprecated.
setPublishAuthorizationSuccess(boolean) - Method in class org.springframework.security.access.intercept.AbstractSecurityInterceptor: Deprecated.

Only AuthorizationFailureEvent will be published.
setRedirectStrategy(RedirectStrategy) - Method in class org.springframework.security.web.access.channel.AbstractRetryEntryPoint: Deprecated.

Sets the strategy to be used for redirecting to the required channel URL.
setRejectPublicInvocations(boolean) - Method in class org.springframework.security.access.intercept.AbstractSecurityInterceptor: Deprecated.

By rejecting public invocations (and setting this property to true), essentially you are ensuring that every secure object invocation advised by AbstractSecurityInterceptor has a configuration attribute defined.
setRolePrefix(String) - Method in class org.springframework.security.access.intercept.RunAsManagerImpl: Deprecated.

Allows the default role prefix of ROLE_ to be overridden.
setRolePrefix(String) - Method in class org.springframework.security.access.vote.RoleVoter: Deprecated.

Allows the default role prefix of ROLE_ to be overridden.
setRunAsManager(RunAsManager) - Method in class org.springframework.security.access.intercept.AbstractSecurityInterceptor: Deprecated.
setSecureKeyword(String) - Method in class org.springframework.security.web.access.channel.SecureChannelProcessor: Deprecated.
setSecurityContextHolderStrategy(SecurityContextHolderStrategy) - Method in class org.springframework.security.access.intercept.AbstractSecurityInterceptor: Deprecated.

Sets the SecurityContextHolderStrategy to use.
setSecurityInterceptor(AbstractSecurityInterceptor) - Method in class org.springframework.security.access.intercept.MethodInvocationPrivilegeEvaluator: Deprecated.
setSecurityMetadataSource(MethodSecurityMetadataSource) - Method in class org.springframework.security.access.intercept.aopalliance.MethodSecurityInterceptor: Deprecated.
setSecurityMetadataSource(FilterInvocationSecurityMetadataSource) - Method in class org.springframework.security.web.access.channel.ChannelProcessingFilter: Deprecated.
setSecurityMetadataSource(FilterInvocationSecurityMetadataSource) - Method in class org.springframework.security.web.access.intercept.FilterSecurityInterceptor: Deprecated.
setServletContext(ServletContext) - Method in class org.springframework.security.web.access.DefaultWebInvocationPrivilegeEvaluator: Deprecated.
setSidRetrievalStrategy(SidRetrievalStrategy) - Method in class org.springframework.security.acls.AclEntryVoter: Deprecated.
setSidRetrievalStrategy(SidRetrievalStrategy) - Method in class org.springframework.security.acls.afterinvocation.AbstractAclProvider: Deprecated.
setTrustResolver(AuthenticationTrustResolver) - Method in class org.springframework.security.web.access.expression.DefaultWebSecurityExpressionHandler: Deprecated.
Use AbstractSecurityExpressionHandler.setAuthorizationManagerFactory(AuthorizationManagerFactory) instead
setValidateConfigAttributes(boolean) - Method in class org.springframework.security.access.intercept.AbstractSecurityInterceptor: Deprecated.
sidRetrievalStrategy - Variable in class org.springframework.security.acls.afterinvocation.AbstractAclProvider: Deprecated.
supports(Class<?>) - Method in interface org.springframework.security.access.AccessDecisionManager: Deprecated.

Indicates whether the AccessDecisionManager implementation is able to provide access control decisions for the indicated secured object type.
supports(Class<?>) - Method in interface org.springframework.security.access.AccessDecisionVoter: Deprecated.

Indicates whether the AccessDecisionVoter implementation is able to provide access control votes for the indicated secured object type.
supports(Class<?>) - Method in interface org.springframework.security.access.AfterInvocationProvider: Deprecated.

Indicates whether the AfterInvocationProvider is able to provide "after invocation" processing for the indicated secured object type.
supports(Class<?>) - Method in class org.springframework.security.access.annotation.Jsr250Voter: Deprecated.

All classes are supported.
supports(Class<?>) - Method in interface org.springframework.security.access.intercept.AfterInvocationManager: Deprecated.

Indicates whether the AfterInvocationManager implementation is able to provide access control decisions for the indicated secured object type.
supports(Class<?>) - Method in class org.springframework.security.access.intercept.AfterInvocationProviderManager: Deprecated.

Iterates through all AfterInvocationProviders and ensures each can support the presented class.
supports(Class<?>) - Method in class org.springframework.security.access.intercept.RunAsImplAuthenticationProvider: Deprecated.
supports(Class<?>) - Method in interface org.springframework.security.access.intercept.RunAsManager: Deprecated.

Indicates whether the RunAsManager implementation is able to provide run-as replacement for the indicated secure object type.
supports(Class<?>) - Method in class org.springframework.security.access.intercept.RunAsManagerImpl: Deprecated.

This implementation supports any type of class, because it does not query the presented secure object.
supports(Class<?>) - Method in class org.springframework.security.access.method.AbstractMethodSecurityMetadataSource: Deprecated.
supports(Class<?>) - Method in class org.springframework.security.access.prepost.PostInvocationAdviceProvider: Deprecated.
supports(Class<?>) - Method in class org.springframework.security.access.prepost.PreInvocationAuthorizationAdviceVoter: Deprecated.
supports(Class<?>) - Method in interface org.springframework.security.access.SecurityMetadataSource: Deprecated.

Indicates whether the SecurityMetadataSource implementation is able to provide ConfigAttributes for the indicated secure object type.
supports(Class<?>) - Method in class org.springframework.security.access.vote.AbstractAccessDecisionManager: Deprecated.

Iterates through all AccessDecisionVoters and ensures each can support the presented class.
supports(Class<?>) - Method in class org.springframework.security.access.vote.AbstractAclVoter: Deprecated.

This implementation supports only MethodSecurityInterceptor, because it queries the presented MethodInvocation.
supports(Class<?>) - Method in class org.springframework.security.access.vote.AuthenticatedVoter: Deprecated.

This implementation supports any type of class, because it does not query the presented secure object.
supports(Class<?>) - Method in class org.springframework.security.access.vote.RoleVoter: Deprecated.

This implementation supports any type of class, because it does not query the presented secure object.
supports(Class<?>) - Method in class org.springframework.security.acls.afterinvocation.AbstractAclProvider: Deprecated.

This implementation supports any type of class, because it does not query the presented secure object.
supports(Class<?>) - Method in class org.springframework.security.messaging.access.expression.MessageExpressionVoter: Deprecated.
supports(Class<?>) - Method in class org.springframework.security.messaging.access.intercept.DefaultMessageSecurityMetadataSource: Deprecated.
supports(Class<?>) - Method in class org.springframework.security.web.access.expression.WebExpressionVoter: Deprecated.
supports(Class<?>) - Method in class org.springframework.security.web.access.intercept.DefaultFilterInvocationSecurityMetadataSource: Deprecated.
supports(ConfigAttribute) - Method in interface org.springframework.security.access.AccessDecisionManager: Deprecated.

Indicates whether this AccessDecisionManager is able to process authorization requests presented with the passed ConfigAttribute.
supports(ConfigAttribute) - Method in interface org.springframework.security.access.AccessDecisionVoter: Deprecated.

Indicates whether this AccessDecisionVoter is able to vote on the passed ConfigAttribute.
supports(ConfigAttribute) - Method in interface org.springframework.security.access.AfterInvocationProvider: Deprecated.

Indicates whether this AfterInvocationProvider is able to participate in a decision involving the passed ConfigAttribute.
supports(ConfigAttribute) - Method in class org.springframework.security.access.annotation.Jsr250Voter: Deprecated.

The specified config attribute is supported if its an instance of a Jsr250SecurityConfig.
supports(ConfigAttribute) - Method in interface org.springframework.security.access.intercept.AfterInvocationManager: Deprecated.

Indicates whether this AfterInvocationManager is able to process "after invocation" requests presented with the passed ConfigAttribute.
supports(ConfigAttribute) - Method in class org.springframework.security.access.intercept.AfterInvocationProviderManager: Deprecated.
supports(ConfigAttribute) - Method in interface org.springframework.security.access.intercept.RunAsManager: Deprecated.

Indicates whether this RunAsManager is able to process the passed ConfigAttribute.
supports(ConfigAttribute) - Method in class org.springframework.security.access.intercept.RunAsManagerImpl: Deprecated.
supports(ConfigAttribute) - Method in class org.springframework.security.access.prepost.PostInvocationAdviceProvider: Deprecated.
supports(ConfigAttribute) - Method in class org.springframework.security.access.prepost.PreInvocationAuthorizationAdviceVoter: Deprecated.
supports(ConfigAttribute) - Method in class org.springframework.security.access.vote.AbstractAccessDecisionManager: Deprecated.
supports(ConfigAttribute) - Method in class org.springframework.security.access.vote.AuthenticatedVoter: Deprecated.
supports(ConfigAttribute) - Method in class org.springframework.security.access.vote.RoleVoter: Deprecated.
supports(ConfigAttribute) - Method in class org.springframework.security.acls.AclEntryVoter: Deprecated.
supports(ConfigAttribute) - Method in class org.springframework.security.acls.afterinvocation.AbstractAclProvider: Deprecated.
supports(ConfigAttribute) - Method in class org.springframework.security.messaging.access.expression.MessageExpressionVoter: Deprecated.
supports(ConfigAttribute) - Method in interface org.springframework.security.web.access.channel.ChannelDecisionManager: Deprecated.

Indicates whether this ChannelDecisionManager is able to process the passed ConfigAttribute.
supports(ConfigAttribute) - Method in class org.springframework.security.web.access.channel.ChannelDecisionManagerImpl: Deprecated.
supports(ConfigAttribute) - Method in interface org.springframework.security.web.access.channel.ChannelProcessor: Deprecated.

Indicates whether this ChannelProcessor is able to process the passed ConfigAttribute.
supports(ConfigAttribute) - Method in class org.springframework.security.web.access.channel.InsecureChannelProcessor: Deprecated.
supports(ConfigAttribute) - Method in class org.springframework.security.web.access.channel.SecureChannelProcessor: Deprecated.
supports(ConfigAttribute) - Method in class org.springframework.security.web.access.expression.WebExpressionVoter: Deprecated.

T

toString() - Method in class org.springframework.security.access.intercept.RunAsUserToken: Deprecated.
toString() - Method in class org.springframework.security.access.SecurityConfig: Deprecated.
toString() - Method in class org.springframework.security.access.vote.AbstractAccessDecisionManager: Deprecated.

U

UnanimousBased - Class in org.springframework.security.access.vote: Deprecated.
Use AuthorizationManager instead
UnanimousBased(List<AccessDecisionVoter<?>>) - Constructor for class org.springframework.security.access.vote.UnanimousBased: Deprecated.

V

value() - Element in annotation interface org.springframework.security.access.method.P: Deprecated.

The parameter name
vote(Authentication, Object, Collection<ConfigAttribute>) - Method in class org.springframework.security.access.annotation.Jsr250Voter: Deprecated.

Votes according to JSR 250.
vote(Authentication, Object, Collection<ConfigAttribute>) - Method in class org.springframework.security.access.vote.AuthenticatedVoter: Deprecated.
vote(Authentication, Object, Collection<ConfigAttribute>) - Method in class org.springframework.security.access.vote.RoleVoter: Deprecated.
vote(Authentication, MethodInvocation, Collection<ConfigAttribute>) - Method in class org.springframework.security.access.prepost.PreInvocationAuthorizationAdviceVoter: Deprecated.
vote(Authentication, MethodInvocation, Collection<ConfigAttribute>) - Method in class org.springframework.security.acls.AclEntryVoter: Deprecated.
vote(Authentication, Message<T>, Collection<ConfigAttribute>) - Method in class org.springframework.security.messaging.access.expression.MessageExpressionVoter: Deprecated.
vote(Authentication, FilterInvocation, Collection<ConfigAttribute>) - Method in class org.springframework.security.web.access.expression.WebExpressionVoter: Deprecated.
vote(Authentication, S, Collection<ConfigAttribute>) - Method in interface org.springframework.security.access.AccessDecisionVoter: Deprecated.

Indicates whether or not access is granted.

W

WebExpressionVoter - Class in org.springframework.security.web.access.expression: Deprecated.
Use WebExpressionAuthorizationManager instead
WebExpressionVoter() - Constructor for class org.springframework.security.web.access.expression.WebExpressionVoter: Deprecated.

A B C D E F G H I J L M O P R S T U V W
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form