Remove include servlet/saml2/index.adoc
This commit is contained in:
@@ -1,12 +1,12 @@
|
||||
[[jc-method]]
|
||||
== Method Security
|
||||
= Method Security
|
||||
|
||||
From version 2.0 onwards Spring Security has improved support substantially for adding security to your service layer methods.
|
||||
It provides support for JSR-250 annotation security as well as the framework's original `@Secured` annotation.
|
||||
From 3.0 you can also make use of new <<el-access,expression-based annotations>>.
|
||||
You can apply security to a single bean, using the `intercept-methods` element to decorate the bean declaration, or you can secure multiple beans across the entire service layer using the AspectJ style pointcuts.
|
||||
|
||||
=== EnableMethodSecurity
|
||||
== EnableMethodSecurity
|
||||
|
||||
In Spring Security 5.6, we can enable annotation-based security using the `@EnableMethodSecurity` annotation on any `@Configuration` instance.
|
||||
|
||||
@@ -149,7 +149,7 @@ class MethodSecurityConfig {
|
||||
----
|
||||
====
|
||||
|
||||
==== Customizing Authorization
|
||||
=== Customizing Authorization
|
||||
|
||||
Spring Security's `@PreAuthorize`, `@PostAuthorize`, `@PreFilter`, and `@PostFilter` ship with rich expression-based support.
|
||||
|
||||
@@ -245,7 +245,7 @@ We expose `GrantedAuthorityDefaults` using a `static` method to ensure that Spri
|
||||
====
|
||||
|
||||
[[jc-method-security-custom-authorization-manager]]
|
||||
==== Custom Authorization Managers
|
||||
=== Custom Authorization Managers
|
||||
|
||||
Method authorization is a combination of before- and after-method authorization.
|
||||
|
||||
@@ -598,7 +598,7 @@ class MethodSecurityConfig {
|
||||
and it will be invoked after the `@PostAuthorize` interceptor.
|
||||
|
||||
[[jc-enable-global-method-security]]
|
||||
=== EnableGlobalMethodSecurity
|
||||
== EnableGlobalMethodSecurity
|
||||
|
||||
We can enable annotation-based security using the `@EnableGlobalMethodSecurity` annotation on any `@Configuration` instance.
|
||||
For example, the following would enable Spring Security's `@Secured` annotation.
|
||||
@@ -740,7 +740,7 @@ interface BankService {
|
||||
----
|
||||
====
|
||||
|
||||
=== GlobalMethodSecurityConfiguration
|
||||
== GlobalMethodSecurityConfiguration
|
||||
|
||||
Sometimes you may need to perform operations that are more complicated than are possible with the `@EnableGlobalMethodSecurity` annotation allow.
|
||||
For these instances, you can extend the `GlobalMethodSecurityConfiguration` ensuring that the `@EnableGlobalMethodSecurity` annotation is present on your subclass.
|
||||
@@ -776,7 +776,7 @@ open class MethodSecurityConfig : GlobalMethodSecurityConfiguration() {
|
||||
For additional information about methods that can be overridden, refer to the `GlobalMethodSecurityConfiguration` Javadoc.
|
||||
|
||||
[[ns-global-method]]
|
||||
=== The <global-method-security> Element
|
||||
== The <global-method-security> Element
|
||||
This element is used to enable annotation-based security in your application (by setting the appropriate attributes on the element), and also to group together security pointcut declarations which will be applied across your entire application context.
|
||||
You should only declare one `<global-method-security>` element.
|
||||
The following declaration would enable support for Spring Security's `@Secured`:
|
||||
@@ -889,7 +889,7 @@ If two annotations are found which apply to a particular method, then only one o
|
||||
====
|
||||
|
||||
[[ns-protect-pointcut]]
|
||||
=== Adding Security Pointcuts using protect-pointcut
|
||||
== Adding Security Pointcuts using protect-pointcut
|
||||
|
||||
The use of `protect-pointcut` is particularly powerful, as it allows you to apply security to many beans with only a simple declaration.
|
||||
Consider the following example:
|
||||
|
||||
Reference in New Issue
Block a user