Skip to content

SecurityExpressionRoot#hasAuthority should delegate to AuthorizationManagerFactory#hasAuthority#18487

Closed
thuri wants to merge 3 commits intospring-projects:mainfrom
thuri:main
Closed

SecurityExpressionRoot#hasAuthority should delegate to AuthorizationManagerFactory#hasAuthority#18487
thuri wants to merge 3 commits intospring-projects:mainfrom
thuri:main

Conversation

@thuri
Copy link
Contributor

@thuri thuri commented Jan 13, 2026

Trying to fix #18486 by calling the hasAuthority method of AuthorizationManagerFactory

@spring-projects-issues spring-projects-issues added the status: waiting-for-triage An issue we've not yet triaged label Jan 13, 2026
…zationManager#hasAuthority

Signed-off-by: Michael Lück <michael@lueckonline.net>
@jzheaux jzheaux changed the title Fixes #18486 delegate calls of hasAuthority to AuthorizationManager#hasAuthority SecurityExpressionRoot#hasAuthority should call AuthorizationManagerFactory#hasAuthority Feb 26, 2026
@jzheaux jzheaux self-assigned this Feb 26, 2026
@jzheaux jzheaux added type: bug A general bug in: core An issue in spring-security-core and removed status: waiting-for-triage An issue we've not yet triaged labels Feb 26, 2026
@jzheaux jzheaux changed the title SecurityExpressionRoot#hasAuthority should call AuthorizationManagerFactory#hasAuthority SecurityExpressionRoot#hasAuthority should delegate to AuthorizationManagerFactory#hasAuthority Feb 26, 2026
@jzheaux jzheaux added this to the 7.0.4 milestone Feb 26, 2026
@jzheaux
Copy link
Contributor

jzheaux commented Feb 27, 2026

Thanks for the PR, @thuri! This has now be merged into 7.0.x in 3a14745. I also added tests in 1575610. The fix will go out in the next 7.0.x maintenance release.

@jzheaux jzheaux closed this Feb 27, 2026
@jzheaux
Copy link
Contributor

jzheaux commented Feb 27, 2026

As a side note, in the future, if you cut a branch, like gh-18486 instead of pushing your PR directly onto main, it allows me to push my polishes directly to your PR so that you can see them more easily in the future.

You can read our contributing guidelines for this and other tips.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

in: core An issue in spring-security-core type: bug A general bug

Projects

None yet

Development

Successfully merging this pull request may close these issues.

SecurityExpressionRoot#hasAuthority should delegate to AuthorizationManagerFactory#hasAuthority(String)

3 participants