public class PopulatedRoleAuthority extends RoleAuthority
Commonly, a users'
details are stored in one table 'users-table' and its roles are stored in another 'role-table'.
The users' authorities of type
RoleAuthority are actually keys (by role-name) to the role
When authenticating a user, an
Authentication object is returned with all
the users' details and authorities. To be ignorant of how details are actually kept, the users'
details are populated with a flat representation of all the authorities a role represents.
The first option to populate a users' authorities with a role is to just add the authorities a
role represents. But, you loose the 'role' representation. If you want to keep it, for example
for visibility in tooling, you can return a
UserDetails.getAuthorities() will include user-specific authorities and
This is only relevant is you are planning to implement your own
SecurityManager. Out default implementation already incorporates this construct.
|Constructor and Description|
Constructs a role authority with all the authorities this role represents.
Copyright © GigaSpaces.