make an authorization decision by considering all < authorize > tag attributes . the following are valid combinations of attributes : access url , method the above combinations are mutually exclusive and evaluated in the given order . concode_field_sep String access concode_elem_sep String method concode_elem_sep String url concode_field_sep boolean authorizeUsingUrlCheck concode_elem_sep boolean authorizeUsingAccessExpression concode_elem_sep ServletContext getServletContext concode_elem_sep String getAccess concode_elem_sep ServletRequest getRequest concode_elem_sep ServletResponse getResponse concode_elem_sep EvaluationContext createExpressionEvaluationContext concode_elem_sep String getMethod concode_elem_sep void setUrl concode_elem_sep String getUrl concode_elem_sep void setMethod concode_elem_sep void setAccess concode_elem_sep WebInvocationPrivilegeEvaluator getPrivilegeEvaluator concode_elem_sep SecurityExpressionHandler<FilterInvocation> getExpressionHandler
boolean function ( ) { boolean loc0 ; if ( StringUtils . hasText ( getAccess ( ) ) ) { loc0 = authorizeUsingAccessExpression ( ) ; } else if ( StringUtils . hasText ( getUrl ( ) ) ) { loc0 = authorizeUsingUrlCheck ( ) ; } else { loc0 = false ; } return loc0 ; }