SEC-2031: PreInvocationAuthorizationAdviceVoter supports subclasses

2012-10-07 11:55:35 -05:00
parent 72aecaff05
commit f3b143f677
2 changed files with 42 additions and 1 deletions
--- a/core/src/main/java/org/springframework/security/access/prepost/PreInvocationAuthorizationAdviceVoter.java
+++ b/core/src/main/java/org/springframework/security/access/prepost/PreInvocationAuthorizationAdviceVoter.java
@@ -35,7 +35,7 @@ public class PreInvocationAuthorizationAdviceVoter implements AccessDecisionVote
    }

    public boolean supports(Class<?> clazz) {
-        return clazz.isAssignableFrom(MethodInvocation.class);
+        return MethodInvocation.class.isAssignableFrom(clazz);
    }

    public int vote(Authentication authentication, MethodInvocation method, Collection<ConfigAttribute> attributes) {