From 07d1c7c5eb32572ef848d23a7b85a1b6253a42b6 Mon Sep 17 00:00:00 2001 From: Shazin Sadakath Date: Mon, 31 Oct 2016 23:59:25 +0530 Subject: [PATCH] AclAuthorizationStrategyImpl uses name Fixes gh-4085 --- .../acls/domain/AclAuthorizationStrategyImpl.java | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) diff --git a/acl/src/main/java/org/springframework/security/acls/domain/AclAuthorizationStrategyImpl.java b/acl/src/main/java/org/springframework/security/acls/domain/AclAuthorizationStrategyImpl.java index d8a96ba2bc..1424c156d5 100644 --- a/acl/src/main/java/org/springframework/security/acls/domain/AclAuthorizationStrategyImpl.java +++ b/acl/src/main/java/org/springframework/security/acls/domain/AclAuthorizationStrategyImpl.java @@ -16,18 +16,20 @@ package org.springframework.security.acls.domain; -import java.util.Arrays; -import java.util.List; - import org.springframework.security.access.AccessDeniedException; import org.springframework.security.acls.model.Acl; import org.springframework.security.acls.model.Sid; import org.springframework.security.acls.model.SidRetrievalStrategy; import org.springframework.security.core.Authentication; import org.springframework.security.core.GrantedAuthority; +import org.springframework.security.core.authority.AuthorityUtils; import org.springframework.security.core.context.SecurityContextHolder; import org.springframework.util.Assert; +import java.util.Arrays; +import java.util.List; +import java.util.Set; + /** * Default implementation of {@link AclAuthorizationStrategy}. *

@@ -118,7 +120,8 @@ public class AclAuthorizationStrategyImpl implements AclAuthorizationStrategy { } // Iterate this principal's authorities to determine right - if (authentication.getAuthorities().contains(requiredAuthority)) { + Set authorities = AuthorityUtils.authorityListToSet(authentication.getAuthorities()); + if (authorities.contains(requiredAuthority.getAuthority())) { return; }