shiro-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Laszlo Hornyak (JIRA)" <>
Subject [jira] [Created] (SHIRO-607) AuthorizationAttributeSourceAdvisor ignores type-annotations
Date Tue, 03 Jan 2017 19:06:58 GMT
Laszlo Hornyak created SHIRO-607:

             Summary: AuthorizationAttributeSourceAdvisor ignores type-annotations
                 Key: SHIRO-607
             Project: Shiro
          Issue Type: Bug
          Components: Integration: Spring
    Affects Versions: 1.4.0-RC2, 1.3.2
            Reporter: Laszlo Hornyak
            Assignee: Les Hazlewood

The spring integration only checks the method annotations. When the security annotations are
on the type, no authentication will be required.

@RequiresAuthentication //ignored
interface Business {
  //not secured
  void criticalSomething();

h3. Links

* Related mailing list thread: [mail archive|]
* github [pull request|]
* [a possible workaround|]

This message was sent by Atlassian JIRA

View raw message