# Package org.springframework.security.access.intercept

package org.springframework.security.access.intercept
Abstract level security interception classes which are responsible for enforcing the configured security constraints for a secure object.

A secure object is a term frequently used throughout the security system. It does not refer to a business object that is being secured, but instead refers to some infrastructure object that can have security facilities provided for it by Spring Security. For example, one secure object would be `MethodInvocation`, whilst another would be HTTP `org.springframework.security.web.FilterInvocation`. Note these are infrastructure objects and their design allows them to represent a large variety of actual resources that might need to be secured, such as business objects or HTTP request URLs.

Each secure object typically has its own interceptor package. Each package usually includes a concrete security interceptor (which subclasses `AbstractSecurityInterceptor`) and an appropriate `SecurityMetadataSource` for the type of resources the secure object represents.

Related Packages
Package
Description
org.springframework.security.access
Core access-control related code, including security metadata related classes, interception code, access control annotations, EL support and voter-based implementations of the central `AccessDecisionManager` interface.
org.springframework.security.access.intercept.aopalliance
Enforces security for AOP Alliance `MethodInvocation`s, such as via Spring AOP.
org.springframework.security.access.intercept.aspectj
Enforces security for AspectJ `JointPoint`s, delegating secure object callbacks to the calling aspect.
Class
Description
AbstractSecurityInterceptor
Deprecated.
Use `org.springframework.security.web.access.intercept.AuthorizationFilter` instead for filter security, `org.springframework.security.messaging.access.intercept.AuthorizationChannelInterceptor` for messaging security, or `AuthorizationManagerBeforeMethodInterceptor` and `AuthorizationManagerAfterMethodInterceptor` for method security.
AfterInvocationManager
Deprecated.
Use delegation with `AuthorizationManager`
AfterInvocationProviderManager
Deprecated.
Use delegation with `AuthorizationManager`
InterceptorStatusToken
Deprecated.
Use delegation with `AuthorizationManager`
MethodInvocationPrivilegeEvaluator
Deprecated.
Use `AuthorizationManager` instead
RunAsImplAuthenticationProvider
Deprecated.
Authentication is now separated from authorization in Spring Security.
RunAsManager
Deprecated.
Authentication is now separated from authorization in Spring Security.
RunAsManagerImpl
Deprecated.
Authentication is now separated from authorization in Spring Security.
RunAsUserToken
Deprecated.
Authentication is now separated from authorization in Spring Security.