You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The AuthorizationFilter and the DSL should have a property where users can set whether or not they want to apply the filter to all dispatcher types.
Current Behavior
Currently, FilterSecurityInterceptor and AuthorizationFilter only perform authorization checks on the first request. Authorization should be performed on dispatch.
NOTE: We may consider only making these changes to AuthorizationFilter rather than FilterSecurityInterceptor since we are moving towards using AuthorizationManager rather than the old authorization APIs.
Expected Behavior
The
AuthorizationFilter
and the DSL should have a property where users can set whether or not they want to apply the filter to all dispatcher types.Current Behavior
Currently,
FilterSecurityInterceptor
andAuthorizationFilter
only perform authorization checks on the first request. Authorization should be performed on dispatch.NOTE: We may consider only making these changes to
AuthorizationFilter
rather thanFilterSecurityInterceptor
since we are moving towards usingAuthorizationManager
rather than the old authorization APIs.Related:
The text was updated successfully, but these errors were encountered: