[WW-5012] Make a public state check the first acceptance check in SecurityMemberAccess

• Type: Improvement
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 2.5.20
• Fix Version/s: 6.0.0
• Component/s: Core
• Labels: performance security

Environment

All environments.

• Assignee: Unassigned
• Reporter: James Chaplin
• Created: 31/Jan/19 15:21
• Updated: 14/Jun/22 09:47
• Resolved: 19/Feb/19 09:19

Description

During discussion for WW-5004, a recommendation was made by two Apache Struts Team members to adjust the sequence of calls in the SecurityMemberAccess module.

The recommendation was to make the member's public state check (e.g. checkPublicMemberAccess()) the absolute first check made during acceptance checks).

This improvement would look at implementing this change for the access check ordering, and any minor enhancements that are applicable to the ordering change.

Issue Links

• links to: GitHub Pull Request #324