diff --git a/doc/docbook/acegi.xml b/doc/docbook/acegi.xml index 1ff162fed9..f1d01bf159 100644 --- a/doc/docbook/acegi.xml +++ b/doc/docbook/acegi.xml @@ -743,6 +743,26 @@ public interface BankManager { Jakarta Commons Attributes method of configuration, you should set validateConfigAttributes to false. + + Please note that when using + BeanNameAutoProxyCreator to create the required + proxy for security, the configuration must contain the property + proxyTargetClass set to true. + Otherwise, the method passed to + MethodSecurityInterceptor.invoke is the proxy's + caller, not the proxy's target. Note that this introduces a + requirement on CGLIB. See an example of using + BeanNameAutoProxyCreator below: + + <bean id="autoProxyCreator" class="org.springframework.aop.framework.autoproxy.BeanNameAutoProxyCreator"> + <property name="interceptorNames"> + <list><value>methodSecurityInterceptor</value></list> + </property> + <property name="beanNames"> + <list><value>targetObjectName</value></list> + </property> + <property name="proxyTargetClass" value="true"/> +</bean>