package com.arcmind.springquickstart.security;


import org.aspectj.lang.ProceedingJoinPoint;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.beans.factory.annotation.Qualifier;
import org.springframework.stereotype.Component;

/**
�* @author Richard Hightower
�*/
@Component
public class SecurityAdvice {
� � � � 
� � � � @Autowired(required=true)
� � � � @Qualifier ("manager")
� � � � private SecurityService securityManager;

� � � � public void checkSecurity(ProceedingJoinPoint joinPoint) throws Throwable {
� � � � � � � � 
� � � � � � /* If the user is not logged in, don't let them use this method */
� � � � � � if(!securityManager.isLoggedIn()){ � � � � � �
� � � � � � � � throw new SecurityViolationException();
� � � � � � }

� � � � � � /* Get the name of the method being invoked. */
� � � � � � String operationName = joinPoint.getSignature().getName();
� � � � � � /* Get the name of the object being invoked. */
� � � � � � String objectName = joinPoint.getThis().getClass().getName();


� � � � � �/*
� � � � � � * Invoke the method or next Interceptor in the list,
� � � � � � * if the current user is allowed.
� � � � � � */
� � � � � � if (!securityManager.isAllowed(objectName, operationName)){
� � � � � � � � throw new SecurityViolationException();
� � � � � � }
� � � � 
� � � � � � joinPoint.proceed();
� � � � }
� � � � 

� � � � /**
� � � � �* @return Returns the manager.
� � � � �*/
� � � � public SecurityService getSecurityManager() {
� � � � � � � � return securityManager;
� � � � }
� � � � /**
� � � � �* @param manager The manager to set.
� � � � �*/
� � � � public void setSecurityManager(SecurityService manager) {
� � � � � � � � this.securityManager = manager;
� � � � }
� � � � 
}