Spring Security
  1. Spring Security
  2. SEC-1287

Regression with fix SEC-1022 - cannot register custom permissions w/BasicLookupStrategy

    Details

    • Type: Bug Bug
    • Status: Closed
    • Priority: Major Major
    • Resolution: Fixed
    • Affects Version/s: 3.0.0 RC1
    • Fix Version/s: 3.0.0.RC2
    • Component/s: ACLs
    • Labels:
      None

      Description

      With the fix for SEC-1002 in 3.0RC1 and the removal of the static methods in BasePermission, unfortunately it is now impossible to use BasicLookupStrategy with custom permissions. This is because the PermissionFactory member of BasicLookupStrategy is private, with no accessor and no setter or constructor injection possible. While this wasn't available in prior versions of 3.0 either, at least in prior versions you could use the static methods to register permissions.

      Can you expose the PermissionFactory member on BasicLookupStrategy, either through an overloaded constructor or setter?

        Activity

        Hide
        Peter Mularien added a comment -

        I wish I could edit bugs in Spring JIRA

        The linked bug in the description – SEC-1002 – is the correct bug number. The bug reference in the title is incorrect.

        Show
        Peter Mularien added a comment - I wish I could edit bugs in Spring JIRA The linked bug in the description – SEC-1002 – is the correct bug number. The bug reference in the title is incorrect.
        Hide
        Peter Mularien added a comment -

        Actually, I was right the first time. After reviewing the diffs for SEC-1022 (which removed the static methods), that was the source of this bug.

        Show
        Peter Mularien added a comment - Actually, I was right the first time. After reviewing the diffs for SEC-1022 (which removed the static methods), that was the source of this bug.
        Hide
        Luke Taylor added a comment -

        Thanks Peter. I've added a setter method to the class.

        Show
        Luke Taylor added a comment - Thanks Peter. I've added a setter method to the class.

          People

          • Assignee:
            Luke Taylor
            Reporter:
            Peter Mularien
          • Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved: