From 2b50aa3ae0de2027f1e4548f1adae87fcea24ed7 Mon Sep 17 00:00:00 2001 From: Josh Cummings Date: Wed, 26 Oct 2022 13:47:16 -0600 Subject: [PATCH] Polish Method Security Migration Steps Removed checkboxes when there is only one step --- docs/modules/ROOT/pages/migration.adoc | 18 ++++-------------- 1 file changed, 4 insertions(+), 14 deletions(-) diff --git a/docs/modules/ROOT/pages/migration.adoc b/docs/modules/ROOT/pages/migration.adoc index 939b1aad45..8d129adb56 100644 --- a/docs/modules/ROOT/pages/migration.adoc +++ b/docs/modules/ROOT/pages/migration.adoc @@ -21,12 +21,8 @@ However, if you run into trouble with this enhancement, you can instead <>. -[[reactive-method-security-remove-useauthorizationmanager]] -[%interactive] -* [ ] Remove `useAuthorizationManager` usage from `@EnableReactiveMethodSecurity` - -{security-api-url}org/springframework/security/config/annotation/method/configuration/EnableReactiveMethodSecurity.html[`@EnableReactiveMethodSecurity`] sets `useAuthorizationManager` to `true` by default. -Because of that, in 6.0 you can change: +In 6.0, `@EnableReactiveMethodSecurity` defaults `useAuthorizationManager` to `true`. +So, to complete migration, {security-api-url}org/springframework/security/config/annotation/method/configuration/EnableReactiveMethodSecurity.html[`@EnableReactiveMethodSecurity`] remove the `useAuthorizationManager` attribute: ==== .Java @@ -42,7 +38,7 @@ Because of that, in 6.0 you can change: ---- ==== -to: +changes to: ==== .Java @@ -68,9 +64,7 @@ It's more important to stay on 6.0 and get the security improvements. === Don't Use `AuthorizationManager` in Method Security -[[servlet-replace-methodsecurity-with-globalmethodsecurity]] -[%interactive] -* [ ] Replace xref:servlet/authorization/method-security.adoc#jc-enable-method-security[method security] with xref:servlet/authorization/method-security.adoc#jc-enable-global-method-security[global method security] +To opt out of `AuthorizationManager` for Method Security, replace xref:servlet/authorization/method-security.adoc#jc-enable-method-security[method security] with xref:servlet/authorization/method-security.adoc#jc-enable-global-method-security[global method security] For applications using xref:servlet/authorization/method-security.adoc#jc-enable-method-security[pre-post annotations], make sure to turn it on to reactivate the behavior. @@ -166,10 +160,6 @@ should change to: === Don't Use `AuthorizationManager` in Method Security -[[reactive-change-to-useauthorizationmanager-false]] -[%interactive] -* [ ] Change `useAuthorizationManager` to `false` - To opt-out of {security-api-url}org/springframework/security/authorization/AuthorizationManager.html[`AuthorizationManager`] for reactive method security, add `useAuthorizationManager = false`: ====