in plugin-core/plugin/src/main/groovy/grails/plugin/springsecurity/access/vote/AuthenticatedVetoableDecisionManager.groovy [60:78]
protected boolean checkAuthenticatedVoters(Authentication authentication, object, Collection<ConfigAttribute> configAttributes) {
boolean grant = false
for (AccessDecisionVoter voter in decisionVoters) {
if (voter instanceof AuthenticatedVoter) {
boolean voterSupportsSecurityContext = object == null || voter.supports(object.class)
if (voterSupportsSecurityContext) {
int result = voter.vote(authentication, object, configAttributes)
switch (result) {
case AccessDecisionVoter.ACCESS_GRANTED: grant = true; break
case AccessDecisionVoter.ACCESS_DENIED: deny(); break
default: break // abstain
}
}
}
}
grant
}