import org.springframework.security.access.expression.SecurityExpressionOperations; //导入依赖的package包/类
@Override
public SecurityExpressionOperations createSecurityExpressionRoot(Authentication authentication,
																 FilterInvocation fi) {
	RbacWebSecurityExpressionRoot root = new RbacWebSecurityExpressionRoot(authentication,
																		   fi,
																		   permissionService,
																		   resourceService);
	root.setPermissionEvaluator(getPermissionEvaluator());
	root.setRoleHierarchy(getRoleHierarchy());
	return root;
}
 

import org.springframework.security.access.expression.SecurityExpressionOperations; //导入依赖的package包/类
@Override
protected SecurityExpressionOperations createSecurityExpressionRoot(final Authentication authentication, final FilterInvocation fi) {
	
	// There we use the extended version of expression manager
	final WebSecurityExpressionRoot root = new ExtendedWebSecurityExpressionRoot(authentication, fi);
	root.setPermissionEvaluator(getPermissionEvaluator());
	root.setTrustResolver(trustResolver);
	root.setRoleHierarchy(getRoleHierarchy());
	root.setDefaultRolePrefix("ROLE_");
	return root;
}
 

import org.springframework.security.access.expression.SecurityExpressionOperations; //导入依赖的package包/类
@Override
protected SecurityExpressionOperations createSecurityExpressionRoot(Authentication authentication,
		ServerWebExchange invocation) {
	SecurityExpressionRoot root = new SecurityExpressionRoot(authentication) {};
	root.setPermissionEvaluator(getPermissionEvaluator());
	root.setTrustResolver(trustResolver);
	root.setRoleHierarchy(getRoleHierarchy());
	root.setDefaultRolePrefix(defaultRolePrefix);
	return root;
}
 

import org.springframework.security.access.expression.SecurityExpressionOperations; //导入依赖的package包/类
@Override
protected SecurityExpressionOperations createSecurityExpressionRoot(Authentication authentication, FilterInvocation fi) {
    WebSecurityExpressionRoot root = new CustomWebSecurityExpressionRoot(authentication, fi);
    root.setPermissionEvaluator(getPermissionEvaluator());
    root.setTrustResolver(new AuthenticationTrustResolverImpl());
    root.setRoleHierarchy(getRoleHierarchy());
    return root;
}
 

import org.springframework.security.access.expression.SecurityExpressionOperations; //导入依赖的package包/类
@Override
public void configure(WebSecurity web) throws Exception {
    web.expressionHandler(new DefaultWebSecurityExpressionHandler() {
        @Override
        protected SecurityExpressionOperations createSecurityExpressionRoot(Authentication authentication, FilterInvocation fi) {
            WebSecurityExpressionRoot root = (WebSecurityExpressionRoot) super.createSecurityExpressionRoot(authentication, fi);
            //root.setDefaultRolePrefix(""); //remove the prefix ROLE_
            return root;
        }
    });
}
 

import org.springframework.security.access.expression.SecurityExpressionOperations; //导入依赖的package包/类
@Override
protected SecurityExpressionOperations createSecurityExpressionRoot(Authentication authentication,
		FilterInvocation fi) {
	CoreWebSecurityExpressionRoot root = new CoreWebSecurityExpressionRoot(authentication, fi);
	root.setCorePermissionEvaluator(getCorePermissionEvaluator());
	root.setTrustResolver(trustResolver);
	root.setRoleHierarchy(getRoleHierarchy());
	return root;
}
 

import org.springframework.security.access.expression.SecurityExpressionOperations; //导入依赖的package包/类
public HttpSessionSecurityContextRepository(
        final UserDetailsService userService,
        final Supplier<SecurityExpressionOperations> securityExpressionOperationsSupplier
) {
    this.userService = userService;
    this.securityExpressionOperationsSupplier = securityExpressionOperationsSupplier;
}
 

import org.springframework.security.access.expression.SecurityExpressionOperations; //导入依赖的package包/类
public SecurityExpressionOperations get() {
    Authentication authentication = SecurityContextHolder.getContext().getAuthentication();
    if (authentication == null) {
        authentication = HttpSessionSecurityContextRepository.createAnonymousAuthenticationToken();
    }

    final SecurityExpressionRoot expressionOperations = new SecurityExpressionRoot(authentication) {};
    expressionOperations.setPermissionEvaluator(permissionEvaluator);
    expressionOperations.setRoleHierarchy(roleHierarchy);
    expressionOperations.setTrustResolver(authenticationTrustResolver);

    return expressionOperations;
}
 

import org.springframework.security.access.expression.SecurityExpressionOperations; //导入依赖的package包/类
public static SecurityExpressionOperations getSecurityExpressionOperations(Http.Context httpContext) {
    return (SecurityExpressionOperations) httpContext.args.get(SECURITY_EXPRESSION_OPERATIONS_KEY);
}