Skip to content

Introduce AuthorizationManagerWebInvocationPrivilegeEvaluator #10590

@marcusdacoregio

Description

@marcusdacoregio

In 5.5 the new AuthorizationManager API was introduced. One place that this API is being used is in the SecurityFilterChain, in combination with the AuthorizationFilter, replacing the FilterSecurityInterceptor.

The current default implementation of WebInvocationPrivilegeEvaluator, DefaultWebInvocationPrivilegeEvaluator, only supports the AbstractSecurityInterceptor.

We should provide an implementation of the WebInvocationPrivilegeEvaluator which delegates the check to an AuthorizationManager instance.

Related:

Metadata

Metadata

Labels

in: webAn issue in web modules (web, webmvc)status: backportedAn issue that has been backported to maintenance branchestype: enhancementA general enhancement

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions