class SecurityTagLib extends java.lang.Object implements GrailsConfigurationAware
Security tags.
| Modifiers | Name | Description |
|---|---|---|
protected static FilterChain |
DUMMY_CHAIN |
|
protected java.util.Map<java.lang.String, Expression> |
expressionCache |
| Type | Name and description |
|---|---|
java.lang.Object |
accessRenders the body if the specified expression (a String; the 'expression' attribute) evaluates to true or if the specified URL is allowed. |
java.lang.Object |
ifAllGrantedRenders the body if all of the specified roles are granted to the user. |
java.lang.Object |
ifAnyGrantedRenders the body if any of the specified roles are granted to the user. |
java.lang.Object |
ifLoggedInRenders the body if the user is authenticated. |
java.lang.Object |
ifNotGrantedRenders the body if none of the specified roles are granted to the user. |
java.lang.Object |
ifNotLoggedInRenders the body if the user is not authenticated. |
java.lang.Object |
ifNotSwitchedRenders the body if the user is not authenticated as another user via run-as. |
java.lang.Object |
ifSwitchedRenders the body if the user is authenticated as another user via run-as. |
java.lang.Object |
linkProvides a wrapper around the standard Grails link tag g:link.
|
java.lang.Object |
loggedInUserInfoRenders a property (specified by the 'field' attribute) from the principal. |
static java.lang.Object |
namespace |
java.lang.Object |
noAccessRenders the body if the specified expression (a String; the 'expression' attribute) evaluates to false or if the specified URL is not allowed. |
java.lang.String |
serverContextPath |
java.lang.Object |
springSecurityServiceDependency injection for springSecurityService. |
java.lang.Object |
switchedUserOriginalUsernameRenders the username of the 'real' authentication when authenticated as another user via run-as. |
java.lang.Object |
usernameRenders the user's username if logged in. |
SecurityExpressionHandler |
webExpressionHandlerDependency injection for webExpressionHandler. |
WebInvocationPrivilegeEvaluator |
webInvocationPrivilegeEvaluatorDependency injection for webInvocationPrivilegeEvaluator. |
| Constructor and description |
|---|
SecurityTagLib() |
| Type Params | Return Type | Name and description |
|---|---|---|
|
protected java.lang.Object |
assertAttribute(java.lang.String name, java.lang.Object attrs, java.lang.String tag) |
|
protected java.lang.Object |
determineSource() |
|
protected Expression |
findOrCreateExpression(java.lang.String text) |
|
protected boolean |
hasAccess(java.lang.Object attrs, java.lang.String tagName) |
|
protected boolean |
isFallback(java.lang.Object attrs) |
|
void |
setConfiguration(Config co) |
| Methods inherited from class | Name |
|---|---|
class java.lang.Object |
java.lang.Object#equals(java.lang.Object), java.lang.Object#getClass(), java.lang.Object#hashCode(), java.lang.Object#notify(), java.lang.Object#notifyAll(), java.lang.Object#toString(), java.lang.Object#wait(), java.lang.Object#wait(long), java.lang.Object#wait(long, int) |
Renders the body if the specified expression (a String; the 'expression' attribute)
evaluates to true or if the specified URL is allowed.
Renders the body if all of the specified roles are granted to the user. Roles are specified in the 'roles' attribute which is a comma-delimited string.
Renders the body if any of the specified roles are granted to the user. Roles are specified in the 'roles' attribute which is a comma-delimited string.
Renders the body if the user is authenticated.
Renders the body if none of the specified roles are granted to the user. Roles are specified in the 'roles' attribute which is a comma-delimited string.
Renders the body if the user is not authenticated.
Renders the body if the user is not authenticated as another user via run-as.
Renders the body if the user is authenticated as another user via run-as.
Provides a wrapper around the standard Grails link tag g:link.
Renders the link if the user has access to the specified URL.
Renders a property (specified by the 'field' attribute) from the principal.
Renders the body if the specified expression (a String; the 'expression' attribute)
evaluates to false or if the specified URL is not allowed.
Dependency injection for springSecurityService.
Renders the username of the 'real' authentication when authenticated as another user via run-as.
Renders the user's username if logged in.
Dependency injection for webExpressionHandler.
Dependency injection for webInvocationPrivilegeEvaluator.