Cwikius-Spring/spring-security
1
0
Fork 0
mirror of https://github.com/spring-projects/spring-security.git synced 2025-07-07 03:02:23 +00:00
Code Issues Packages Projects Releases Wiki Activity

SEC-151: Add comment about BeanNameAutoProxyCreator.

Browse Source
This commit is contained in:
Ben Alex 2006-01-26 10:12:09 +00:00
parent 433e5fb858
commit 9766ee1cbe
1 changed files with 20 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
doc/docbook/acegi.xml
View File

@ -743,6 +743,26 @@ public interface BankManager {
Jakarta Commons Attributes method of configuration, you should set Jakarta Commons Attributes method of configuration, you should set
<literal>validateConfigAttributes</literal> to <literal>validateConfigAttributes</literal> to
<literal>false</literal>.</para> <literal>false</literal>.</para>
<para>Please note that when using
<literal>BeanNameAutoProxyCreator</literal> to create the required
proxy for security, the configuration must contain the property
<literal>proxyTargetClass</literal> set to <literal>true</literal>.
Otherwise, the method passed to
<literal>MethodSecurityInterceptor.invoke</literal> is the proxy's
caller, not the proxy's target. Note that this introduces a
requirement on CGLIB. See an example of using
<literal>BeanNameAutoProxyCreator</literal> below:</para>
<para><programlisting>&lt;bean id="autoProxyCreator" class="org.springframework.aop.framework.autoproxy.BeanNameAutoProxyCreator"&gt;
&lt;property name="interceptorNames"&gt;
&lt;list&gt;&lt;value&gt;methodSecurityInterceptor&lt;/value&gt;&lt;/list&gt;
&lt;/property&gt;
&lt;property name="beanNames"&gt;
&lt;list&gt;&lt;value&gt;targetObjectName&lt;/value&gt;&lt;/list&gt;
&lt;/property&gt;
&lt;property name="proxyTargetClass" value="true"/&gt;
&lt;/bean&gt; </programlisting></para>
</sect2> </sect2>
<sect2 id="security-interception-aspectj"> <sect2 id="security-interception-aspectj">