diff --git a/core/src/main/java/org/acegisecurity/intercept/method/MethodInvocationPrivilegeEvaluator.java b/core/src/main/java/org/acegisecurity/intercept/method/MethodInvocationPrivilegeEvaluator.java index 6ee33f0384..e459f48bd8 100644 --- a/core/src/main/java/org/acegisecurity/intercept/method/MethodInvocationPrivilegeEvaluator.java +++ b/core/src/main/java/org/acegisecurity/intercept/method/MethodInvocationPrivilegeEvaluator.java @@ -64,9 +64,6 @@ public class MethodInvocationPrivilegeEvaluator implements InitializingBean { } public boolean isAllowed(MethodInvocation mi, Authentication authentication) { - Assert.notNull(authentication, "Authentication required"); - Assert.notNull(authentication.getAuthorities(), - "Authentication must provided non-null GrantedAuthority[]s"); Assert.notNull(mi, "MethodInvocation required"); Assert.notNull(mi.getMethod(), "MethodInvocation must provide a non-null getMethod()"); @@ -82,7 +79,7 @@ public class MethodInvocationPrivilegeEvaluator implements InitializingBean { return true; } - if (authentication == null) { + if (authentication == null || authentication.getAuthorities() == null || authentication.getAuthorities().length == 0) { return false; }