Removed the spring-security-custom-voter module altogether.

Integrated the custom voter example into the spring-security-custom-permission module.

spring-security-custom-permission/pom.xml

@@ -128,6 +128,7 @@
             <artifactId>spring-security-taglibs</artifactId>
             <version>4.1.3.RELEASE</version>
         </dependency>
+
         <dependency>
             <groupId>javax.servlet.jsp.jstl</groupId>
             <artifactId>jstl-api</artifactId>
@@ -239,6 +240,9 @@
 
 
     <properties>
+        <start-class>org.baeldung.Application</start-class>
+        <!--If you want to run the example with the voters comment the tag above and uncomment the one below-->
+        <!--<start-class>org.baeldung.voter.VoterApplication</start-class>-->
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
         <java.version>1.8</java.version>
         <rest-assured.version>2.4.0</rest-assured.version>

spring-security-custom-permission/src/main/java/org/baeldung/Application.java

@@ -1,12 +1,17 @@
 package org.baeldung;
 
 import org.springframework.boot.SpringApplication;
-import org.springframework.boot.autoconfigure.SpringBootApplication;
+import org.springframework.boot.autoconfigure.EnableAutoConfiguration;
 import org.springframework.boot.context.web.SpringBootServletInitializer;
+import org.springframework.context.annotation.ComponentScan;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.context.annotation.FilterType;
 
-@SpringBootApplication
+@Configuration
+@EnableAutoConfiguration
+@ComponentScan(excludeFilters = 
+  @ComponentScan.Filter(type = FilterType.REGEX, pattern = "org.baeldung.voter.*"))
 public class Application extends SpringBootServletInitializer {
-
     public static void main(String[] args) {
         SpringApplication.run(Application.class, args);
     }

spring-security-custom-permission/src/main/java/org/baeldung/voter/MinuteBasedVoter.java

@@ -0,0 +1,33 @@
+package org.baeldung.voter;
+
+import java.time.LocalDateTime;
+import java.util.Collection;
+
+import org.springframework.security.access.AccessDecisionVoter;
+import org.springframework.security.access.ConfigAttribute;
+import org.springframework.security.core.Authentication;
+import org.springframework.security.core.GrantedAuthority;
+
+public class MinuteBasedVoter implements AccessDecisionVoter {
+    @Override
+    public boolean supports(ConfigAttribute attribute) {
+        return true;
+    }
+
+    @Override
+    public boolean supports(Class clazz) {
+        return true;
+    }
+
+    @Override
+    public int vote(Authentication authentication, Object object, Collection collection) {
+        return authentication
+                .getAuthorities()
+                .stream()
+                .map(GrantedAuthority::getAuthority)
+                .filter(r -> "ROLE_USER".equals(r) && LocalDateTime.now().getMinute() % 2 != 0)
+                .findAny()
+                .map(s -> ACCESS_DENIED)
+                .orElseGet(() -> ACCESS_ABSTAIN);
+    }
+}

spring-security-custom-permission/src/main/java/org/baeldung/voter/VoterApplication.java

@@ -0,0 +1,17 @@
+package org.baeldung.voter;
+
+import org.springframework.boot.SpringApplication;
+import org.springframework.boot.autoconfigure.EnableAutoConfiguration;
+import org.springframework.context.annotation.ComponentScan;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.context.annotation.FilterType;
+
+@Configuration
+@EnableAutoConfiguration
+@ComponentScan(basePackages = {"org.baeldung.voter"})
+public class VoterApplication {
+
+    public static void main(String[] args) {
+        SpringApplication.run(VoterApplication.class, args);
+    }
+}

spring-security-custom-permission/src/main/java/org/baeldung/voter/VoterMvcConfig.java

@@ -0,0 +1,18 @@
+package org.baeldung.voter;
+
+import org.springframework.context.annotation.Configuration;
+import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
+import org.springframework.web.servlet.config.annotation.ViewControllerRegistry;
+import org.springframework.web.servlet.config.annotation.WebMvcConfigurerAdapter;
+
+/**
+ * Created by ambrusadrianz on 30/09/2016.
+ */
+
+@Configuration
+public class VoterMvcConfig extends WebMvcConfigurerAdapter {
+    @Override
+    public void addViewControllers(ViewControllerRegistry registry) {
+        registry.addViewController("/").setViewName("private");
+    }
+}

spring-security-custom-permission/src/main/java/org/baeldung/voter/WebSecurityConfig.java

@@ -0,0 +1,69 @@
+package org.baeldung.voter;
+
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.security.access.AccessDecisionManager;
+import org.springframework.security.access.AccessDecisionVoter;
+import org.springframework.security.access.vote.AuthenticatedVoter;
+import org.springframework.security.access.vote.RoleVoter;
+import org.springframework.security.access.vote.UnanimousBased;
+import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
+import org.springframework.security.config.annotation.web.builders.HttpSecurity;
+import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
+import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
+import org.springframework.security.web.access.expression.WebExpressionVoter;
+import org.springframework.security.web.util.matcher.AntPathRequestMatcher;
+
+import java.util.Arrays;
+import java.util.List;
+
+//@Configuration
+//@EnableWebSecurity
+public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
+    @Autowired
+    public void configureGlobal(AuthenticationManagerBuilder auth) throws Exception {
+        // @formatter: off
+        auth.inMemoryAuthentication()
+                .withUser("user").password("pass").roles("USER")
+                .and()
+                .withUser("admin").password("pass").roles("ADMIN");
+        // @formatter: on
+    }
+
+    @Override
+    protected void configure(HttpSecurity http) throws Exception {
+        // @formatter: off
+        http
+                // needed so our login could work
+                .csrf()
+                  .disable()
+                .authorizeRequests()
+                .anyRequest()
+                  .authenticated()
+                  .accessDecisionManager(accessDecisionManager())
+                .antMatchers("/").hasAnyRole("ROLE_ADMIN", "ROLE_USER")
+                .and()
+                .formLogin()
+                  .permitAll()
+                .and()
+                .logout()
+                  .permitAll()
+                  .deleteCookies("JSESSIONID")
+                  .logoutSuccessUrl("/login");
+        // @formatter: on
+    }
+
+    @Bean
+    public AccessDecisionManager accessDecisionManager() {
+        // @formatter: off
+        List<AccessDecisionVoter<? extends Object>> decisionVoters =
+                Arrays.asList(
+                        new WebExpressionVoter(),
+                        new RoleVoter(),
+                        new AuthenticatedVoter(),
+                        new MinuteBasedVoter());
+        // @formatter: on
+        return new UnanimousBased(decisionVoters);
+    }
+}

spring-security-custom-permission/src/main/java/org/baeldung/voter/XmlSecurityConfig.java

@@ -0,0 +1,15 @@
+package org.baeldung.voter;
+
+import org.springframework.context.annotation.Configuration;
+import org.springframework.context.annotation.ImportResource;
+
+/**
+ * Created by ambrusadrianz on 09/10/2016.
+ */
+@Configuration
+@ImportResource({"classpath:spring-security.xml"})
+public class XmlSecurityConfig {
+    public XmlSecurityConfig() {
+        super();
+    }
+}

spring-security-custom-permission/src/main/resources/spring-security.xml

@@ -0,0 +1,40 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<beans:beans xmlns="http://www.springframework.org/schema/security"
+             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+             xmlns:beans="http://www.springframework.org/schema/beans"
+             xsi:schemaLocation="
+      http://www.springframework.org/schema/security
+      http://www.springframework.org/schema/security/spring-security-4.0.xsd
+      http://www.springframework.org/schema/beans
+      http://www.springframework.org/schema/beans/spring-beans.xsd">
+
+    <http use-expressions="true" auto-config="true" access-decision-manager-ref="accessDecisionManager">
+        <intercept-url pattern="/**" access="hasAnyRole('ROLE_ADMIN', 'ROLE_USER')"/>
+
+        <form-login default-target-url="/"/>
+        <csrf disabled="true"/>
+        <logout logout-url="/logout" delete-cookies="JSESSIONID" logout-success-url="/login"/>
+    </http>
+
+    <beans:bean id="accessDecisionManager" class="org.springframework.security.access.vote.UnanimousBased">
+        <beans:constructor-arg>
+            <beans:list>
+                <beans:bean class="org.springframework.security.web.access.expression.WebExpressionVoter"/>
+                <beans:bean class="org.springframework.security.access.vote.AuthenticatedVoter"/>
+                <beans:bean class="org.springframework.security.access.vote.RoleVoter"/>
+                <beans:bean class="org.baeldung.voter.MinuteBasedVoter"/>
+            </beans:list>
+        </beans:constructor-arg>
+    </beans:bean>
+
+    <beans:bean id="minuteBasedVoter" class="org.baeldung.voter.MinuteBasedVoter"/>
+
+    <authentication-manager>
+        <authentication-provider>
+            <user-service>
+                <user name="user" password="pass" authorities="ROLE_USER"/>
+                <user name="admin" password="pass" authorities="ROLE_ADMIN"/>
+            </user-service>
+        </authentication-provider>
+    </authentication-manager>
+</beans:beans>

spring-security-custom-permission/src/main/resources/templates/private.html

@@ -0,0 +1,10 @@
+<!DOCTYPE html>
+<html xmlns="http://www.w3.org/1999/xhtml" xmlns:th="http://www.thymeleaf.org"
+      xmlns:sec="http://www.thymeleaf.org/thymeleaf-extras-springsecurity3">
+<head>
+    <title>Private</title>
+</head>
+<body>
+<h1>Congrats!</h1>
+</body>
+</html>