[SHIRO-185] Shiro Annotations in Spring apps: annotations on method implementations not handled when using Spring's DefaultAutoProxyCreator

• Type: Bug
• Status: Closed
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 1.0.0
• Fix Version/s: 1.1.0
• Component/s: Integration: Spring
• Assignee: Les Hazlewood
• Reporter: Les Hazlewood
• Created: 17/Jul/10 09:27
• Updated: 26/Jun/11 22:51
• Resolved: 18/Jul/10 10:25

Description

When using Spring's DefaultAutoProxyCreator mechanism to enable Shiro security checks via annotations (@RequiresAuthentication, @RequiresPermissions, etc), Shiro annotations on Interface methods are the only ones that are processed successfully. If a method implementatin is annotated directly, the authorization interceptor is never triggered during a method call.