# Package org.springframework.security.acls.model

package org.springframework.security.acls.model
Interfaces and shared classes to manage access control lists (ACLs) for domain object instances.

Related Packages
Package
Description
org.springframework.security.acls
The Spring Security ACL package which implements instance-based security for domain objects.
org.springframework.security.acls.afterinvocation
After-invocation providers for collection and array filtering.
org.springframework.security.acls.domain
Basic implementation of access control lists (ACLs) interfaces.
org.springframework.security.acls.jdbc
JDBC-based persistence of ACL information
Class
Description
AccessControlEntry
Represents an individual permission assignment within an `Acl`.
Acl
Represents an access control list (ACL) for a domain object.
AclCache
A caching layer for `JdbcAclService`.
AclDataAccessException
Abstract base class for Acl data operations.
AclService
Provides retrieval of `Acl` instances.
AlreadyExistsException
Thrown if an `Acl` entry already exists for the object.
AuditableAccessControlEntry
Represents an ACE that provides auditing information.
AuditableAcl
A mutable ACL that provides audit capabilities.
ChildrenExistException
Thrown if an `Acl` cannot be deleted because children `Acl`s exist.
MutableAcl
A mutable `Acl`.
MutableAclService
Provides support for creating and storing `Acl` instances.
NotFoundException
Thrown if an ACL-related object cannot be found.
ObjectIdentity
Represents the identity of an individual domain object instance.
ObjectIdentityGenerator
Strategy which creates an `ObjectIdentity` from an object identifier (such as a primary key) and type information.
ObjectIdentityRetrievalStrategy
Strategy interface that provides the ability to determine which `ObjectIdentity` will be returned for a particular domain object
OwnershipAcl
A mutable ACL that provides ownership capabilities.
Permission
Represents a permission granted to a `Sid` for a given domain object.
PermissionGrantingStrategy
Allow customization of the logic for determining whether a permission or permissions are granted to a particular sid or sids by an `Acl`.
Sid
A security identity recognised by the ACL system.
SidRetrievalStrategy
Strategy interface that provides an ability to determine the `Sid` instances applicable for an `Authentication`.
UnloadedSidException
Thrown if an `Acl` cannot perform an operation because it only loaded a subset of `Sid`s and the caller has requested details for an unloaded `Sid` .