Spring/spring-webflow
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

authorization comparison reversed in isAuthorizedAll

Browse Source 
SWF-93
SWF-486
This commit is contained in:
Scott Andrews
2008-03-04 17:03:12 +00:00
parent a3d95f6d3a
commit 44a541e5c7
2 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
spring-webflow/src/main/java/org/springframework/webflow/security/SecurityRule.java
View File

@@ -118,7 +118,7 @@ public class SecurityRule {
* @return true if authorized
*/
private boolean isAuthorizedAll(Collection principalAuthorities) {
return getRequiredAuthorities().containsAll(principalAuthorities);
return principalAuthorities.containsAll(getRequiredAuthorities());
}
/**

1
spring-webflow/src/test/java/org/springframework/webflow/security/SecurityRuleTests.java
View File

@@ -81,6 +81,7 @@ public class SecurityRuleTests extends TestCase {
Collection principalAuthorities = new HashSet();
principalAuthorities.add("ROLE_USER");
principalAuthorities.add("ROLE_SUPERVISOR");
principalAuthorities.add("ROLE_NEVERTOBEHAD");
return principalAuthorities;
}
}