Details
-
Bug
-
Status: Open
-
Minor
-
Resolution: Unresolved
-
None
-
None
-
None
-
None
Description
With the shown sanitized context definition, Shiro intercepts method invocations annotated with RequiresRoles, but fails to intercept if the annotation is at the class level. This requires duplication of the annotation to every method within a Controller class.
Les says: "[...] this is something our AOPAlliance interceptor would have to
check for - first the method and if it has annotations, and then the
class to see if it has annotations [...]"