SEC-1697: Don't publish authorization success events in AbstractSecurityInterceptor by default.

2011-04-06 13:54:32 +01:00
parent 74b0c1780e
commit 01c9c4e4db
3 changed files with 31 additions and 4 deletions
--- a/web/src/test/java/org/springframework/security/web/access/intercept/FilterSecurityInterceptorTests.java
+++ b/web/src/test/java/org/springframework/security/web/access/intercept/FilterSecurityInterceptorTests.java
@@ -105,7 +105,8 @@ public class FilterSecurityInterceptorTests {

        interceptor.invoke(fi);

-        verify(publisher).publishEvent(any(AuthorizedEvent.class));
+        // SEC-1697
+        verify(publisher, never()).publishEvent(any(AuthorizedEvent.class));
    }

    @Test