85d685f7d3
SEC-1611: Make access attribute in authorize tag a runtime expression
16 years ago
4a40d80da1
SEC-1418: Deprecate GrantedAuthorityImpl in favour of final SimpleGrantedAuthority.
...
It should be noted that equality checks or lookups with Strings or other authority types will now fail where they would have succeeded before.
16 years ago
4ad0652787
Removed array of authorities constructor from TestingAuthenticationToken and RunAsUserToken.
16 years ago
ca679e1479
Reformatting.
16 years ago
1c8d28501c
SEC-1550: Convert signatures to use Collection<? extends GrantedAuthority> where appropriate.
16 years ago
bd84a2bfa1
SWC-1552 Update .tld in integration test to match change in taglib.
16 years ago
70600a0277
SEC-1552 Refactor AuthorizeTag and LegacyAuthorize tag to make them independent of JSP tag rendering.
16 years ago
af56f4844d
SEC-1562: Created SecurityExpressionHandler interface and AbstractSecurityExpressionHandler.
16 years ago
3c02989d67
Removal of jmock test dependency and upgrading of mockito version to 1.8.5. Minor adjustments to other build deps and configurations (e.g. prevent groovy from being used as a transitive dep, since we only use it for tests).
16 years ago
85c4c91e0e
IDEA inspection refactorings.
16 years ago
36e0fb6d91
SEC-1518: Fix element ordering in security.tld
16 years ago
b3aad4cf19
Javadoc fixes.
16 years ago
dada047e04
SEC-1456: Set rtexprvalue=true for "url" attribute in access tag to allow dynamic values (such as URL of current page).
16 years ago
bf91f2ca67
SEC-524: Added "var" attribute to authorize and accesscontrollist JSP tags.
...
Allows the result of the boolean condition granting/denying access to be stored in the page context for later use, without having to duplicate the tag.
16 years ago
0551dd89ac
SEC-1420: Add htmlEscape attribute to authentication JSP tag.
...
This allows HTML escaping to be disabled if required.
16 years ago
c12c43da9e
Javadoc fixes.
16 years ago
36612377e2
Replace package.html with package-info.java files, creating new ones where missing and updating outdated contents.
16 years ago
052537c8b0
Removing $Id$ markers and stripping trailing whitespace from the codebase.
16 years ago
893f212fa5
Tidying
16 years ago
3a24ddfb43
Corrected description in tld file for accescontrollist tag, removing reference to outdated class.
17 years ago
cad32ffe39
SEC-1325: Tighten up Authentication interface contract to disallow null authorities. Modified internals of AbstractAuthenticationToken to use an empty list instead of null. Clarified Javadoc. removed unnecessary null checks in classes which use the interface.
17 years ago
2b99c6331e
Javadoc.
17 years ago
9374bddceb
Added test class for AccessControlListTag.
17 years ago
937e370fb4
SEC-1022: Minor reformatting.
17 years ago
3f70d79df5
SEC-1022: Remove use of static methods/initializers in Acl Permissions. Converted PermissionFactory to a strategy which is used to convert integers and names to Permission instances.
17 years ago
731402e9f5
SEC-525: [PATCH] Add AccessCheckerTag based on URL resource access permissions. Added functionality to "authorize" tag to allow evaluation of whether a particual url is accessible to the user. Uses a WebInvocationPrivilegeEvaluator registered in the application context.
17 years ago
b531a81176
SEC-1246: Introduce EL-based authorization tag. Added optional access expression to authorize tag.
17 years ago
5605386a30
SEC-1132: Restructuring of ACL packages
17 years ago
e94baf38b3
Tidying up to remove warnings (generics, use of deprecated test classes etc).
17 years ago
1454cbb78e
SEC-1132: Moved TextUtils to web module and StringSplit utils into Digest authentication package (as they aren't used elsewhere).
17 years ago
93bdcccaee
SEC-1132: Moved userdetails into core and added core/authority sub-package
17 years ago
ca7d055c2b
SEC-1132: Created core and authentication packages within core module.
17 years ago
4a41416c9b
Tidying up and removing compiler warnings.
18 years ago
0d7002e322
SEC-1012: Extra fixes to dependent modules following changes to Acl APIs.
18 years ago
cc5966bc7e
Tidying up, removing compiler warnings etc.
18 years ago
8154161ef5
SEC-1035: Updated build to use Spring 3.0.0.M1 Release
18 years ago
55cc98ab54
SEC-1006: Fixed Javadoc.
18 years ago
0ba690fb0e
SEC-1015: Removed acl package from core and also related taglib declaration and implementation class (AclTag).
18 years ago
514bca669f
SEC-999: Introduced custom SecurityExpressionEvaluationContext which is responsible for lazy initialization of parameter values in the context. Also some further conversion of code using GrantedAuthority arrays.
18 years ago
ec44f2bdfe
SEC-1012: Refactoring of use of GrantedAuthority[] to generified collections
18 years ago
d781deffe7
OPEN - issue SEC-966: Consider adding escapeXml attribute to security:authentication
...
http://jira.springframework.org/browse/SEC-966 . Added escaping of rendered text as default.
18 years ago
8fe1b4b402
SEC-914: Slight modification of tld description text for readability.
18 years ago
30f1e5729a
SEC-914: Corrected tagllib descriptor documentation for var attribute in authentication tag.
18 years ago
c372c2df87
SEC-896: Changed result.toString() to String.valueOf(result) in tag class to prevent NPE when value of property is null
18 years ago
8f7b216de3
Import cleaning, removal of unnecessary constructors etc based on eclipse warnings
18 years ago
4586183f17
SEC-717: Resolve UserDetails.getAuthorities() sort logic issue.
18 years ago
af0992b7d1
Refactored taglib directory layout to simplify build.
18 years ago
2dd9faabc0
SEC-674: Created new project modules for cas, captcha, acls and taglibs
18 years ago
Luke Taylor
Rossen Stoyanchev
Ben Alex