Spring/spring-security
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

use-authorization-manager defaults to true

Browse Source 
Closes gh-11929
This commit is contained in:
Josh Cummings
2022-10-05 19:49:53 -06:00
parent 1aa3f1414e
commit 12b9f2e196
162 changed files with 191 additions and 105 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
config/src/main/resources/org/springframework/security/config/spring-security-6.0.rnc
View File

@@ -178,7 +178,7 @@ intercept-methods.attlist &=
## Optional AccessDecisionManager bean ID to be used by the created method security interceptor.
attribute access-decision-manager-ref {xsd:token}?
intercept-methods.attlist &=
## Use the AuthorizationManager API instead of AccessDecisionManager (defaults to false)
## Use the AuthorizationManager API instead of AccessDecisionManager (defaults to true)
attribute use-authorization-manager {xsd:boolean}?
intercept-methods.attlist &=
## Use this AuthorizationManager instead of the default (supercedes use-authorization-manager)
@@ -306,7 +306,7 @@ websocket-message-broker.attrlist &=
## Use this AuthorizationManager instead of deriving one from <intercept-message> elements
attribute authorization-manager-ref {xsd:string}?
websocket-message-broker.attrlist &=
## Use AuthorizationManager API instead of SecurityMetadatasource
## Use AuthorizationManager API instead of SecurityMetadatasource (defaults to true)
attribute use-authorization-manager {xsd:boolean}?
websocket-message-broker.attrlist &=
## Use this SecurityContextHolderStrategy (note only supported in conjunction with the AuthorizationManager API)
@@ -368,7 +368,7 @@ http.attlist &=
## If available, runs the request as the Subject acquired from the JaasAuthenticationToken. Defaults to "false".
attribute jaas-api-provision {xsd:boolean}?
http.attlist &=
## Use AuthorizationManager API instead of SecurityMetadataSource
## Use AuthorizationManager API instead of SecurityMetadataSource (defaults to true)
attribute use-authorization-manager {xsd:boolean}?
http.attlist &=
## Use this AuthorizationManager instead of deriving one from <intercept-url> elements

6
config/src/main/resources/org/springframework/security/config/spring-security-6.0.xsd
View File

@@ -542,7 +542,7 @@
</xs:attribute>
<xs:attribute name="use-authorization-manager" type="xs:boolean">
<xs:annotation>
<xs:documentation>Use the AuthorizationManager API instead of AccessDecisionManager (defaults to false)
<xs:documentation>Use the AuthorizationManager API instead of AccessDecisionManager (defaults to true)
</xs:documentation>
</xs:annotation>
</xs:attribute>
@@ -967,7 +967,7 @@
</xs:attribute>
<xs:attribute name="use-authorization-manager" type="xs:boolean">
<xs:annotation>
<xs:documentation>Use AuthorizationManager API instead of SecurityMetadatasource
<xs:documentation>Use AuthorizationManager API instead of SecurityMetadatasource (defaults to true)
</xs:documentation>
</xs:annotation>
</xs:attribute>
@@ -1325,7 +1325,7 @@
</xs:attribute>
<xs:attribute name="use-authorization-manager" type="xs:boolean">
<xs:annotation>
<xs:documentation>Use AuthorizationManager API instead of SecurityMetadataSource
<xs:documentation>Use AuthorizationManager API instead of SecurityMetadataSource (defaults to true)
</xs:documentation>
</xs:annotation>
</xs:attribute>