Cwikius-Spring/spring-security
1
0
Fork 0
mirror of synced 2026-08-05 17:57:15 +00:00
Code Issues Packages Projects Releases Wiki Activity

SpEL Expressions Support Returning AuthorizationManager

Browse Source 
Closes gh-17936
This commit is contained in:
Josh Cummings
2025-09-19 10:02:06 -06:00
parent 25e413127c
commit 765bdf1ed0
14 changed files with 84 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/modules/ROOT/pages/servlet/authorization/method-security.adoc
+6
View File
@@ -1362,6 +1362,12 @@ Note, though, that returning an object is preferred as this doesn't incur the ex
Then, you can access the custom details when you <<fallback-values-authorization-denied, customize how the authorization result is handled>>.
[TIP]
====
Further, you can return an `AuthorizationManager` itself.
This is helpful when unifying custom web authorization rules with method security ones since web security by default requires specifying an `AuthorizationManager` instance.
====
[[custom-authorization-managers]]
=== Using a Custom Authorization Manager