Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

SEC-47: AbstractSecurityInterceptor default to reject public invocations #311

Closed
spring-projects-issues opened this issue Aug 4, 2005 · 2 comments
Closed

SEC-47: AbstractSecurityInterceptor default to reject public invocations #311

spring-projects-issues opened this issue Aug 4, 2005 · 2 comments
Labels
in: core An issue in spring-security-core type: enhancement A general enhancement type: jira An issue that was migrated from JIRA
Milestone
1.0.0 RC1

Comments

@spring-projects-issues
Copy link

Ben Alex(Migrated from SEC-47) said:

AbstractSecurityInterceptor should have a new property, rejectPublicInvocations, which by default will ensure that any public / non-secure invocations are rejected. This is now possible due to the existence of anonymous authentication services in Acegi Security.
@spring-projects-issues
Copy link
Author

Ben Alex said:

See SEC-18 MethodInvocationPrivilegeEvaluator as it will need modification when this task is implemented.

@spring-projects-issues
Copy link
Author

Ben Alex said:

New rejectPublicInvocations property added. By default it is false, meaning secure objects without configuration attributes will continue to be treated as “public” or unauthorized. See JavaDocs for this property for full details. Also modified MethodInvocationPrivilegeEvaluator (SEC-18) to work with these changes. Unit tests pass.

@spring-projects-issues spring-projects-issues added in: core An issue in spring-security-core Closed type: enhancement A general enhancement type: jira An issue that was migrated from JIRA labels Feb 5, 2016
@spring-projects-issues spring-projects-issues added this to the 1.0.0 RC1 milestone Feb 5, 2016
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
in: core An issue in spring-security-core type: enhancement A general enhancement type: jira An issue that was migrated from JIRA
Projects
None yet
Milestone
1.0.0 RC1
Development

No branches or pull requests
2 participants
@spring-projects-issues and others