SEC-1456: Set rtexprvalue=true for "url" attribute in access tag to allow dynamic values (such as URL of current page).

This commit is contained in:
Luke Taylor 2010-04-21 17:29:27 +01:00
parent 6d6c2d31ef
commit e6e168f127

View File

@ -9,7 +9,6 @@
<uri>http://www.springframework.org/security/tags</uri> <uri>http://www.springframework.org/security/tags</uri>
<description> <description>
Spring Security Authorization Tag Library Spring Security Authorization Tag Library
$Id$
</description> </description>
<tag> <tag>
@ -33,7 +32,7 @@
<attribute> <attribute>
<name>url</name> <name>url</name>
<required>false</required> <required>false</required>
<rtexprvalue>false</rtexprvalue> <rtexprvalue>true</rtexprvalue>
<description> <description>
A URL within the application. If the user has access to this URL (as determined by A URL within the application. If the user has access to this URL (as determined by
the AccessDecisionManager), the tag body will be evaluated. If not, it will the AccessDecisionManager), the tag body will be evaluated. If not, it will