From ae6aa97ea95b67ea6b135e63a579528bc9b1ec31 Mon Sep 17 00:00:00 2001 From: Robert Oschwald Date: Fri, 3 Feb 2023 18:00:45 +0100 Subject: [PATCH] Update usage.adoc --- plugin/src/docs/usage.adoc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/plugin/src/docs/usage.adoc b/plugin/src/docs/usage.adoc index 4b53411d..285df937 100644 --- a/plugin/src/docs/usage.adoc +++ b/plugin/src/docs/usage.adoc @@ -124,7 +124,7 @@ Audit logging usually requires auditing the user and/or request context for a sp [WARNING] ==== -Spring-Security-Core plugin between version 3.2.1 and 4.0.1 has been set to MODE_INHERITABLETHREADLOCAL. This is highly insecure, as it might keep the security context. This setting was changed back to the secure MODE_THREADLOCAL in Spring-Security-Core 4.0.1. If you use a Spring-Security-Core plugin and see weird actor behavior, either upgrade the Spring-Security-Core plugin, or explicitly set the SecurityContextHolder strategy to MODE_THREADLOCAL. +Spring-Security-Core plugin between version 3.2.1 and 4.0.1 has been set to MODE_INHERITABLETHREADLOCAL. This can lead to current actor problems, as it might keep the former security context. This setting was changed back to the secure MODE_THREADLOCAL in Spring-Security-Core 4.0.1. If you use a Spring-Security-Core plugin and see weird actor behavior, either upgrade the Spring-Security-Core plugin, or explicitly set the SecurityContextHolder strategy to MODE_THREADLOCAL. https://github.com/grails/grails-spring-security-core/issues/587 ====