Uploaded image for project: 'Spring Security'
  1. Spring Security
  2. SEC-1287

Regression with fix SEC-1022 - cannot register custom permissions w/BasicLookupStrategy

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 3.0.0 RC1
    • Fix Version/s: 3.0.0.RC2
    • Component/s: ACLs
    • Labels:
      None

      Description

      With the fix for SEC-1002 in 3.0RC1 and the removal of the static methods in BasePermission, unfortunately it is now impossible to use BasicLookupStrategy with custom permissions. This is because the PermissionFactory member of BasicLookupStrategy is private, with no accessor and no setter or constructor injection possible. While this wasn't available in prior versions of 3.0 either, at least in prior versions you could use the static methods to register permissions.

      Can you expose the PermissionFactory member on BasicLookupStrategy, either through an overloaded constructor or setter?

        Activity

        Hide
        pmularien Peter Mularien added a comment -

        I wish I could edit bugs in Spring JIRA

        The linked bug in the description – SEC-1002 – is the correct bug number. The bug reference in the title is incorrect.

        Show
        pmularien Peter Mularien added a comment - I wish I could edit bugs in Spring JIRA The linked bug in the description – SEC-1002 – is the correct bug number. The bug reference in the title is incorrect.
        Hide
        pmularien Peter Mularien added a comment -

        Actually, I was right the first time. After reviewing the diffs for SEC-1022 (which removed the static methods), that was the source of this bug.

        Show
        pmularien Peter Mularien added a comment - Actually, I was right the first time. After reviewing the diffs for SEC-1022 (which removed the static methods), that was the source of this bug.
        Hide
        luke Luke Taylor added a comment -

        Thanks Peter. I've added a setter method to the class.

        Show
        luke Luke Taylor added a comment - Thanks Peter. I've added a setter method to the class.

          People

          • Assignee:
            luke Luke Taylor
            Reporter:
            pmularien Peter Mularien
          • Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved: