Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

SEC-2080: Add principal name based checks to SecurityExpressionRoot #2309

Open
spring-projects-issues opened this issue Nov 13, 2012 · 0 comments
Open

SEC-2080: Add principal name based checks to SecurityExpressionRoot #2309

spring-projects-issues opened this issue Nov 13, 2012 · 0 comments
Labels
in: core An issue in spring-security-core type: enhancement A general enhancement type: jira An issue that was migrated from JIRA

Comments

@spring-projects-issues
Copy link

Michael Osipov (Migrated from SEC-2080) said:

For now, Spring Sec supports role-based or pass-all-or-nothing access checks.

Checks like is(String username), isAny(String... username), isPrincipal, isAnyPrincipal would cover other useful cases.

In may env there are only roles for the prod system but not the test system or an authz system where the developer has no write access to, like Active Directory. Quick setups like access="is('michael-o@jira')" would ease this issue.
@spring-projects-issues spring-projects-issues added in: core An issue in spring-security-core Open type: jira An issue that was migrated from JIRA labels Feb 5, 2016
@rwinch rwinch added type: enhancement A general enhancement and removed Open labels May 3, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
in: core An issue in spring-security-core type: enhancement A general enhancement type: jira An issue that was migrated from JIRA
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@rwinch @spring-projects-issues