import org.springframework.security.access.AccessDecisionManager; //导入依赖的package包/类
protected Guard createSecurityGuard() {
	ApplicationContext context = getApplicationContext();
	AccessDecisionManager accessDecisionManager = context.getBean(AccessDecisionManager.class);
	WebInvocationPrivilegeEvaluator invocationPrivilegeEvaluator = context
			.getBean(WebInvocationPrivilegeEvaluator.class);
	if (accessDecisionManager == null || invocationPrivilegeEvaluator == null) {
		return null;
	}
	SpringSecurityGuard springSecurityGuard = new SpringSecurityGuard();
	springSecurityGuard.setApplicationContext(context);
	springSecurityGuard.setAccessDecisionManager(accessDecisionManager);
	springSecurityGuard.setInvocationPrivilegeEvaluator(invocationPrivilegeEvaluator);
	try {
		springSecurityGuard.afterPropertiesSet();
	} catch (Exception e) {
		throw new RuntimeException("Error initialization security Guard", e);
	}
	return springSecurityGuard;

}
 

import org.springframework.security.access.AccessDecisionManager; //导入依赖的package包/类
@Bean
public AccessDecisionManager accessDecisionManager() {
    List<AccessDecisionVoter<? extends Object>> decisionVoters = new ArrayList<>();
    decisionVoters.add(new RoleVoter());
    decisionVoters.add(new AuthenticatedVoter());
    decisionVoters.add(webExpressionVoter());
    return new AffirmativeBased(decisionVoters);
}
 

import org.springframework.security.access.AccessDecisionManager; //导入依赖的package包/类
@Description("ConsensusBased AccessDecisionManager for Authorization voting")
    @Bean
    public AccessDecisionManager accessDecisionManager(
            CustomWebSecurityExpressionHandler customWebSecurityExpressionHandler) {
        List<AccessDecisionVoter<? extends Object>> decisionVoters
                = Arrays.asList(
//                new AuthenticatedVoter(),
//                new RoleVoter(),
                new WebExpressionVoter(){{
                    setExpressionHandler(customWebSecurityExpressionHandler);
                }}
        );
        return new ConsensusBased(decisionVoters);
    }
 

import org.springframework.security.access.AccessDecisionManager; //导入依赖的package包/类
public AccessDecisionManager accessDecisionManager2(
        CustomWebSecurityExpressionHandler customWebSecurityExpressionHandler) {
    List<AccessDecisionVoter<? extends Object>> decisionVoters
            = Arrays.asList(
            new AuthenticatedVoter(),
            new RoleVoter(),
            new WebExpressionVoter(){{
                setExpressionHandler(customWebSecurityExpressionHandler);
            }}
    );
    return new UnanimousBased(decisionVoters);
}
 

import org.springframework.security.access.AccessDecisionManager; //导入依赖的package包/类
@Description("AccessDecisionManager for Authorization voting")
@Bean
public AccessDecisionManager accessDecisionManager(
        CustomWebSecurityExpressionHandler customWebSecurityExpressionHandler) {
    List<AccessDecisionVoter<? extends Object>> decisionVoters
            = Arrays.asList(
            new WebExpressionVoter(){{
                setExpressionHandler(customWebSecurityExpressionHandler);
            }}
    );
    return new ConsensusBased(decisionVoters);
}
 

import org.springframework.security.access.AccessDecisionManager; //导入依赖的package包/类
@Description("ConsensusBased AccessDecisionManager for Authorization voting")
@Bean
public AccessDecisionManager accessDecisionManager(
        CustomWebSecurityExpressionHandler customWebSecurityExpressionHandler) {
    List<AccessDecisionVoter<? extends Object>> decisionVoters
            = Arrays.asList(
            new WebExpressionVoter(){{
                setExpressionHandler(customWebSecurityExpressionHandler);
            }}
    );
    return new ConsensusBased(decisionVoters);
}
 

import org.springframework.security.access.AccessDecisionManager; //导入依赖的package包/类
@Bean
public AccessDecisionManager shellAccessDecisionManager() {
	List<AccessDecisionVoter<?>> voters = new ArrayList<AccessDecisionVoter<?>>();
	RoleVoter voter = new RoleVoter();
	voter.setRolePrefix("");
	voters.add(voter);
	return new UnanimousBased(voters);
}
 

import org.springframework.security.access.AccessDecisionManager; //导入依赖的package包/类
@Bean
public AccessDecisionManager accessDecisionManager() {
  if (properties.isSecurityEnabled() && sessionService() != null) {
    Map<String, String> authorisationDetails = new HashMap<>();
    authorisationDetails.put("configloader/progress", environment.getProperty("c2mon.web.rbac.admin"));
    // Allow show charts without login
    authorisationDetails.put("commandviewer", environment.getProperty("c2mon.web.rbac.user"));

    log.info("Using RbacDecisionManager");
    return new RbacDecisionManager(sessionService(), authorisationDetails);
  }

  log.info("Using DefaultAccessDecisionManager");
  return new DefaultAccessDecisionManager();
}
 

import org.springframework.security.access.AccessDecisionManager; //导入依赖的package包/类
@Autowired
public UsersStorage(KvMapperFactory mapperFactory, AccessDecisionManager accessDecisionManager) {
    this.adm = accessDecisionManager;
    String prefix = KvUtils.join(mapperFactory.getStorage().getPrefix(), "users");
    this.map = KvMap.builder(UserRegistration.class, ExtendedUserDetailsImpl.class)
      .mapper(mapperFactory)
      .path(prefix)
      .passDirty(true)
      .adapter(new KvMapAdapterImpl())
      .build();
}
 

import org.springframework.security.access.AccessDecisionManager; //导入依赖的package包/类
@Override
public boolean supports( ConfigAttribute configAttribute )
{
    for ( AccessDecisionManager accessDecisionManager : accessDecisionManagers )
    {
        if ( accessDecisionManager.supports( configAttribute ) )
        {
            return true;
        }
    }

    return false;
}
 

import org.springframework.security.access.AccessDecisionManager; //导入依赖的package包/类
/**
 * Overridden to remove role prefix for the role voter. The application does not require any other access decision voters in the default configuration.
 */
/*
 * rawtypes must be suppressed because AffirmativeBased constructor takes in a raw typed list of AccessDecisionVoters
 */
@SuppressWarnings("rawtypes")
@Override
protected AccessDecisionManager accessDecisionManager()
{
    List<AccessDecisionVoter<?>> decisionVoters = new ArrayList<>();
    RoleVoter decisionVoter = new RoleVoter();
    decisionVoter.setRolePrefix("");
    decisionVoters.add(decisionVoter);
    return new AffirmativeBased(decisionVoters);
}
 

import org.springframework.security.access.AccessDecisionManager; //导入依赖的package包/类
public MockedSecurityInterceptor() {
    this.setAuthenticationManager(authentication -> null);

    AccessDecisionManager accessDecisionManager = mock(AccessDecisionManager.class);
    doReturn(true).when(accessDecisionManager).supports(any(Class.class));
    this.setAccessDecisionManager(accessDecisionManager);

    FilterInvocationSecurityMetadataSource filterInvocationSecurityMetadataSource =
        mock(FilterInvocationSecurityMetadataSource.class);
    doReturn(true).when(filterInvocationSecurityMetadataSource).supports(any(Class.class));
    this.setSecurityMetadataSource(filterInvocationSecurityMetadataSource);
}
 

import org.springframework.security.access.AccessDecisionManager; //导入依赖的package包/类
@Override
protected AccessDecisionManager accessDecisionManager() {
    final SpringSecurityPolicyEnforcer policyEnforcer = (SpringSecurityPolicyEnforcer)servletContext.getAttribute(SpringSecurityPolicyEnforcer.SPRING_SECURITY_POLICY_ATTRIBUTE);
    if (policyEnforcer == null) {
        throw new IllegalStateException("Spring policy enforcer wasn't initialized.");
    }
    
    return new PieAccessDecisionManager(policyEnforcer);
}
 

import org.springframework.security.access.AccessDecisionManager; //导入依赖的package包/类
@Bean
//	@Order(SecurityProperties.ACCESS_OVERRIDE_ORDER)
//	@ConditionalOnMissingBean(WebSecurityConfigurerAdapter.class)
	@Autowired
	public DefaultUrlSecurityConfigurer defaultSecurityConfigurer(AccessDecisionManager accessDecisionManager){
		return new DefaultUrlSecurityConfigurer(accessDecisionManager);
	}
 

import org.springframework.security.access.AccessDecisionManager; //导入依赖的package包/类
/***
 * 对应的方法决策器
 */
@Override
protected AccessDecisionManager accessDecisionManager() {
	AccessDecisionManager decisionManager = super.accessDecisionManager();
	@SuppressWarnings("unchecked")
	List<AccessDecisionVoter<? extends Object>> decisionVoters = (List<AccessDecisionVoter<? extends Object>>)ReflectUtils.getFieldValue(decisionManager, "decisionVoters");
	decisionVoters.add(new MethodWebExpressionVoter());
	return decisionManager;
}
 

import org.springframework.security.access.AccessDecisionManager; //导入依赖的package包/类
@Bean
@Order(SecurityProperties.ACCESS_OVERRIDE_ORDER)
@ConditionalOnMissingBean(DefaultUrlSecurityConfigurer.class)
@Autowired
public DefaultUrlSecurityConfigurer defaultSecurityConfigurer(AccessDecisionManager accessDecisionManager){
	return super.defaultSecurityConfigurer(accessDecisionManager);
}
 

import org.springframework.security.access.AccessDecisionManager; //导入依赖的package包/类
@Override
protected AccessDecisionManager accessDecisionManager () {
    List<AccessDecisionVoter<?>> decisionVoters = new ArrayList<> ();
    ExpressionBasedPreInvocationAdvice expressionAdvice = new ExpressionBasedPreInvocationAdvice();
    expressionAdvice.setExpressionHandler(getExpressionHandler());
    decisionVoters.add(roleVoter ());
    decisionVoters.add(new AuthenticatedVoter ());
    return new AffirmativeBased (decisionVoters);
}
 

import org.springframework.security.access.AccessDecisionManager; //导入依赖的package包/类
@Override
public boolean isAccessGranted(String beanName, UI ui) {
	
	final PreAuthorize viewSecured = applicationContext.findAnnotationOnBean(beanName, PreAuthorize.class);
				
	if (viewSecured != null) {

		final Class<?> targetClass = AopUtils.getTargetClass(applicationContext.getBean(beanName));
		final Method method = ClassUtils.getMethod(AopUtils.getTargetClass(applicationContext.getBean(beanName)), "enter", com.vaadin.navigator.ViewChangeListener.ViewChangeEvent.class);								
		final MethodInvocation methodInvocation = MethodInvocationUtils.createFromClass(targetClass, method.getName());
								
		final Authentication authentication = SecurityContextHolder.getContext().getAuthentication();
		final AccessDecisionManager accessDecisionManager = applicationContext.getBean(AccessDecisionManager.class);			        	        	        	       	        	       
        final ExpressionBasedAnnotationAttributeFactory attributeFactory = new ExpressionBasedAnnotationAttributeFactory(new DefaultMethodSecurityExpressionHandler());
        
		Collection<ConfigAttribute> atributi = new ArrayList<ConfigAttribute>();
		atributi.add(attributeFactory.createPreInvocationAttribute(null, null, viewSecured.value()));
		
        try {
            accessDecisionManager.decide(authentication, methodInvocation, atributi);
            return true;
        } catch (AccessDeniedException | InsufficientAuthenticationException ex) {
            return false;
        }
		
	} else {
		return true;
	}
	
}
 

import org.springframework.security.access.AccessDecisionManager; //导入依赖的package包/类
@SuppressWarnings("rawtypes")
public static HandlerSecurityInterceptor create() {
  HandlerSecurityInterceptor interceptor = new HandlerSecurityInterceptor();
  WebExpressionVoterAdapter voter = new WebExpressionVoterAdapter(new WebExpressionVoter());
  AccessDecisionManager accessDecisionManager = new AffirmativeBased(Arrays.<AccessDecisionVoter> asList(voter));
  interceptor.setAccessDecisionManager(accessDecisionManager);
  interceptor.setSecurityMetadataSource(new ExpressionBasedHandlerInvocationSecurityMetadataSource());
  return interceptor;
}
 

import org.springframework.security.access.AccessDecisionManager; //导入依赖的package包/类
@Autowired
@Override
public void setAccessDecisionManager(AccessDecisionManager accessDecisionManager) {
    super.setAccessDecisionManager(accessDecisionManager);
}