[DELTASPIKE-292] @SecurityBindings don't respect parameter types of @SecureParameterBinding parameters when determining the authorization method

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.3-incubating
• Fix Version/s: 0.4
• Component/s: Security-Module
• Assignee: Arne Limburg
• Reporter: Arne Limburg
• Created: 17/Nov/12 21:13
• Updated: 14/Oct/14 10:29
• Resolved: 11/Dec/12 12:14

Description

The following beans lead to the following exception: org.apache.deltaspike.security.api.authorization.SecurityDefinitionException: Ambiguous authorizers found for security binding type

@ApplicationScoped
public class SecuredBean
{
@CustomSecurityBinding
public boolean getBlockedResult(@MockParamBinding MockObject mockObject)

{ return mockObject.isValue(); }

public boolean getResult(MockObject mockObject)
{ return mockObject.isValue(); }

}

@ApplicationScoped
public class CustomAuthorizer
{
@Secures
@CustomSecurityBinding
public boolean doSecuredCheck(@MockParamBinding MockObject obj, InvocationContext invocationContext)
throws Exception

{ return obj.isValue(); }

@Secures
@CustomSecurityBinding
public boolean doSecuredCheck(@MockParamBinding MockObject2 obj)

{ return obj.isValue(); }

}

Issue Links

• breaks: DELTASPIKE-742 validateBindings fails with owb for secured-stereotypes with values
• duplicates: DELTASPIKE-291 @SecurityBindings don't respect parameter types of @SecureParameterBinding parameters when determining the authorization method