From 27f47673ad49a996b84e831c524656c8936b76b6 Mon Sep 17 00:00:00 2001
From: Ben Alex <ben.alex@springsource.com>
Date: Fri, 25 Nov 2005 04:40:27 +0000
Subject: [PATCH] SEC-106: Use getMethod() instead of getDeclaredMethod() so
 that methods defined in principal Object superclasses are accessible.

---
 .../org/acegisecurity/taglibs/authz/AuthenticationTag.java     | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/core/src/main/java/org/acegisecurity/taglibs/authz/AuthenticationTag.java b/core/src/main/java/org/acegisecurity/taglibs/authz/AuthenticationTag.java
index bb1ec7966c..ef9f25d158 100644
--- a/core/src/main/java/org/acegisecurity/taglibs/authz/AuthenticationTag.java
+++ b/core/src/main/java/org/acegisecurity/taglibs/authz/AuthenticationTag.java
@@ -17,6 +17,7 @@ package org.acegisecurity.taglibs.authz;
 
 import org.acegisecurity.Authentication;
 import org.acegisecurity.UserDetails;
+
 import org.acegisecurity.context.SecurityContext;
 import org.acegisecurity.context.SecurityContextHolder;
 
@@ -121,7 +122,7 @@ public class AuthenticationTag extends TagSupport {
         Method method = null;
 
         try {
-            method = clazz.getDeclaredMethod(methodName.toString(), (Class[]) null);
+            method = clazz.getMethod(methodName.toString(), (Class[]) null);
         } catch (SecurityException se) {
             throw new JspException(se);
         } catch (NoSuchMethodException nsme) {