SEC-1232: <global-method-security mode="aspectj"/> #1480

Closed
spring-issuemaster opened this Issue Aug 31, 2009 · 9 comments

1 participant

@spring-issuemaster

Mike Wiesner (Migrated from SEC-1232) said:

Using AspectJ instead of Spring AOP, similar to the way it is used in Spring's tx namespace would be great

@spring-issuemaster

Mike Wiesner said:

The classes to use a Aspect library instead of writing your AspectJ aspect yourself are now available and they can be used with normal bean definitions (see the aspectj sample). Integration in the Namespace will follow.

@spring-issuemaster

Bram Walet said:

Hello Mike,

I have extended your sample to include support for @PreFilter, @PreAuthorize, @PostFilter and @PostAuthorize annotations.
This code is based on the forum post here: http://forum.springsource.org/showpost.php?p=270335&postcount=13. I have included test cases in the samples-aspectj including my example bean configuration to provide @Secured and @Pre/Post,Filter/Authorize support at the same time.

@spring-issuemaster

Luke Taylor said:

Namespace support has now also been added. Support for @Pre, @Post etc was added as part of a separate issue so should already be working.

@spring-issuemaster

Grzegorz Borkowski said:

In which Spring-Security module the aspects for compile time weaving are kept? We use the compile time weaving for Spring transaction managament, it's as simple as configuring the aspect library to weave in maven pom file:

org.springframework
spring-aspects

But I can't find such module with method-security aspects in Spring Security. Maybe because it's not in SS 3.0.2, only in 3.0.3?
BTW: I'd really like to test this functionality soon. Is 3.0.3 expected to be realeased soon? If not, is it possible to obtain snapshots from any maven repository? I've tried plugging in different maven repositories (as described here: http://blog.springsource.com/2009/12/02/obtaining-spring-3-artifacts-with-maven/) but with no luck. Do you use "3.0.3.BUILD-SNAPSHOT" version number for snapshots?

@spring-issuemaster

Grzegorz Borkowski said:

Thanks. I also found out the the version is named CI-SNAPSHOT, not BUILD-SNAPSHOT.
But still there is sth wrong. If I add such dependency into pom:

org.springframework.security
spring-security-aspects
3.1.0.CI-SNAPSHOT

then it builds properly. But if I use version 3.0.3.CI-SNAPSHOT:

org.springframework.security
spring-security-aspects
3.0.3.CI-SNAPSHOT

than build fails, claiming "failed to resolve artifact org.springframework.security:spring-security-aspects:jar:3.0.3.CI-SNAPSHOT".
So it looks like 3.1.0.CI-SNAPSHOT version of aspects module is available from spring maven repository, but 3.0.3.CI-SNAPSHOT is not.

@spring-issuemaster

Grzegorz Borkowski said:

Well, it's actually visible on the link you provided: there is only 3.1.0 version there.

@spring-issuemaster

Jonathan Su said:

Is there a 3.0.3 RELEASE version for the spring-security-aspect module?

@spring-issuemaster

Sylvain LAURENT said:

still not available for 3.0.4.RELEASE :-((

@spring-issuemaster spring-issuemaster added this to the 3.1.0.M1 milestone Feb 5, 2016
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment