-
Notifications
You must be signed in to change notification settings - Fork 6.1k
Closed
Labels
in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)status: backportedAn issue that has been backported to maintenance branchesAn issue that has been backported to maintenance branchestype: enhancementA general enhancementA general enhancement
Milestone
Description
In 5.5 the new AuthorizationManager
API was introduced. One place that this API is being used is in the SecurityFilterChain
, in combination with the AuthorizationFilter
, replacing the FilterSecurityInterceptor
.
The current default implementation of WebInvocationPrivilegeEvaluator
, DefaultWebInvocationPrivilegeEvaluator
, only supports the AbstractSecurityInterceptor
.
We should provide an implementation of the WebInvocationPrivilegeEvaluator
which delegates the check to an AuthorizationManager
instance.
Related:
Metadata
Metadata
Assignees
Labels
in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)status: backportedAn issue that has been backported to maintenance branchesAn issue that has been backported to maintenance branchestype: enhancementA general enhancementA general enhancement