Details
-
Improvement
-
Status: Resolved
-
Minor
-
Resolution: Fixed
-
1.1.0
Description
In org.apache.shiro.realm.AuthorizingRealm, line 461, the method private boolean isPermitted(Permission permission, AuthorizationInfo info) should have its access level set to protected. This method is the ideal method to override If a developer wishes to change how a realm that extends AuthorizingRealm interacts with the AuthorizationInfo when permissions are checked. This is because all of the 'isPermitted' method overloads delegate the actual permission checking to this method. As the class stands now, all of the isPermitted overloads have to be re-implemented as overrides to Authorizing realm in order for the developer to safely change this behavior.
Attachments
Issue Links
- is related to
-
SHIRO-400 Allow access to AuthenticationInfo when making decision of it's cache key
- Open