When to use a custom AccessDecisionManager (need a real use case)

I'm just wondering when I will need to use a custom AccessDecisionManager. I need some options for using your experience if someone has used it before, thanks.

+4
source share
1 answer

The canonical example provided in Spring Security Documents is for setting up vote counts, for example, if a particular voter needs to be weighed heavier than others.

You can also customize the behavior based, say, on the properties of the protected object passed to the decide method, for example, based on existing business logic. (This can also be handled by a user selector or other means, but if it is shared, it would be easier to place it in the solution manager.)

IMO is relatively unusual to require extensive customization at this level, but others may have additional understanding.

+4
source

All Articles