Shishir K. Singh wrote:

Could there be instances where currentUser.getAuthorities() returns
null. If so, Arrays.asList(currentUser.getAuthorities()); will throw an
exception.




Most people use DaoAuthenticationProvider, and the corresponding UserDetails interface mandates getAuthorities() as non-null. However, Authentication.getAuthorities() is theoretically allowed return null under its interface contract, so we should handle this possibility.

If you or Francois wish to check the taglibs for incorrect usage and send any patches, I'll be pleased to apply them.

Ben


------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click _______________________________________________ Home: http://acegisecurity.sourceforge.net Acegisecurity-developer mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer

Reply via email to