Skip to content

Fix RoleHirerarchy usage in Example 17 - Authorization module #101

Open
@vrudas

Description

@vrudas

After migration to Spring Boot 3.0.+ and provided Spring Security 6 the code behavior in the Example 17 - Authorization module is not worked in the same way as it was in Spring Security 5. This happened because of the broken support of the RoleHierarchy feature by an AuthorityAuthorizationManager.

The problem was found by a community and corresponding issues were logged:

and some of them are fixed and will be released as a part of the Spring Security 6.1.+ version.

So work of code in this module should be fixed after updating to the latest version of Spring Security that will contain the fix.
During implementation pay attention that all tests from https://github.com/vrudas/spring-framework-examples/blob/main/example-17-authorization/src/test/java/io/sfe/authorization/AccessCheckControllerTest.java are executed successfully 🧪

Metadata

Metadata

Assignees

Labels

bugSomething isn't working

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions