org.apache.click.extras.security
Interface AccessController

All Known Implementing Classes:

RoleAccessController

public interface AccessController

Provides an interface for controlling request access to security resources. A security resource is an abstract term which may refer to a role, permission or authority.

Method Summary

boolean

hasAccess(HttpServletRequest request, String resource) Return true if the user request has access to the specified security resource (role, permission, authority).

Method Detail

hasAccess

boolean hasAccess(HttpServletRequest request,
                  String resource)

Return true if the user request has access to the specified security resource (role, permission, authority).

Please note: this method must cater for a null resource argument. The given resource can be null for anonymous or public resources and allows this implementation to allow or deny access.

Parameters:

request - the user request

resource - the security resource (role, permission, authority)

Returns:

true if the specified user request has access to the security resource