diff --git a/data/src/main/java/org/springframework/security/data/repository/query/SecurityEvaluationContextExtension.java b/data/src/main/java/org/springframework/security/data/repository/query/SecurityEvaluationContextExtension.java index 3e39ae4fde..4d3785d4ca 100644 --- a/data/src/main/java/org/springframework/security/data/repository/query/SecurityEvaluationContextExtension.java +++ b/data/src/main/java/org/springframework/security/data/repository/query/SecurityEvaluationContextExtension.java @@ -134,6 +134,10 @@ public class SecurityEvaluationContextExtension implements EvaluationContextExte }; root.setAuthorizationManagerFactory(this.authorizationManagerFactory); root.setPermissionEvaluator(this.permissionEvaluator); + if (!DEFAULT_ROLE_PREFIX.equals(this.defaultRolePrefix)) { + // Ensure SecurityExpressionRoot can strip the custom role prefix + root.setDefaultRolePrefix(this.defaultRolePrefix); + } return root; }