webauthorizer.java

一个很好的开源项目管理系统源代码

package net.java.workeffort.webapp.security;

import net.java.workeffort.infrastructure.security.AuthorizationException;
import net.java.workeffort.infrastructure.security.ISecurityProfile;

/**
 * Authorization manager for the Web (urls)
 * @author Antony Joseph
 */
public class WebAuthorizer implements IWebAuthorizer {
    /**
     * Checks whether user has authorization for the url path.
     */
    public void authorize(ISecurityProfile securityProfile, String path)
            throws AuthorizationException {
        if (securityProfile.getAccessDecision(path, "ACCESS") == ISecurityProfile.DENIED) {
            throw new AuthorizationException("Authorization failed. partyCd="
                    + securityProfile.getPartyCd() + " target=" + path
                    + " operation=ACCESS");
        }
    }
}