-
Notifications
You must be signed in to change notification settings - Fork 6.1k
Closed
Labels
in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)type: enhancementA general enhancementA general enhancement
Milestone
Description
Expected Behavior
The AuthorizationFilter
and the DSL should have a property where users can set whether or not they want to apply the filter to all dispatcher types.
Current Behavior
Currently, FilterSecurityInterceptor
and AuthorizationFilter
only perform authorization checks on the first request. Authorization should be performed on dispatch.
NOTE: We may consider only making these changes to AuthorizationFilter
rather than FilterSecurityInterceptor
since we are moving towards using AuthorizationManager
rather than the old authorization APIs.
Related:
Metadata
Metadata
Assignees
Labels
in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)type: enhancementA general enhancementA general enhancement