Skip to content

Fix defaultMethodExpressionHandler autowiring#4022

Merged
jgrandja merged 1 commit intospring-projects:masterfrom
rwinch:gh-4020-master
Aug 11, 2016
Merged

Fix defaultMethodExpressionHandler autowiring#4022
jgrandja merged 1 commit intospring-projects:masterfrom
rwinch:gh-4020-master

Conversation

@rwinch
Copy link
Copy Markdown
Member

@rwinch rwinch commented Aug 11, 2016

Previously if a Bean for GlobalMethodSecurityConfiguration's
defaultMethodExpressionHandler was found on a Configuration that also
@Autowired a Bean that enabled method security, the Bean that was
@Autowired would not have security enabled.

This fixes the issue by delaying the lookup of Beans populated on
GlobalMethodSecurityConfiguration's defaultMethodExpressionHandler.

Fixes gh-4020

Previously if a Bean for GlobalMethodSecurityConfiguration's
defaultMethodExpressionHandler was found on a Configuration that also
@Autowired a Bean that enabled method security, the Bean that was
@Autowired would not have security enabled.

This fixes the issue by delaying the lookup of Beans populated on
GlobalMethodSecurityConfiguration's defaultMethodExpressionHandler.

Fixes spring-projectsgh-4020
@rwinch rwinch added this to the 4.2.0 M1 milestone Aug 11, 2016
@rwinch rwinch added type: backport An issue that is a backport of another issue to a maintenance branch in: config An issue in spring-security-config type: bug A general bug labels Aug 11, 2016
@jgrandja jgrandja merged commit bb997ee into spring-projects:master Aug 11, 2016
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

in: config An issue in spring-security-config type: backport An issue that is a backport of another issue to a maintenance branch type: bug A general bug

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Exposing Beans for defaultMethodExpressionHandler can prevent Method Security

2 participants