Grails Spring Security ACL Plugin

See documentation for further information.

Developing this plugin

To run the tests exeucte:

./gradlew -Dgeb.env=chromeHeadless check

v5.0.0 changes

Caching

The default cache manager has changed to JCacheCacheManager.

Method parameter discovery

The behavior of parameter discovery has changed to align with Spring Security 6 default behavior. This may require code changes if you are utilizing ACL annotations that reference method parameters. You will need to add the P annotation to reference method parameters. This is documented in the Spring Security reference doc under the Using Method Parameters section.

Previously if you had code similar to:

@PreAuthorize("hasPermission(#contract, 'write')")
public void updateContact(Contact contact) {
    ...
}

This should be changed to:

import org.springframework.security.core.parameters.P

@PreAuthorize("hasPermission(#contract, 'write')")
public void updateContact(@P("contract") Contact contact) {
    ...
}

Since parameter contract is referenced in the @PreAuthorize annotation, it should now be annotated with @P.