[jira] Created: (WICKET-3240) AnnotationsRoleAuthorizationStrategy isInstantiationAuthorized package==false, class==true returns true

[Richard Emberson (JIRA)]

AnnotationsRoleAuthorizationStrategy isInstantiationAuthorized package==false, 
class==true returns true
-------------------------------------------------------------------------------------------------------

                 Key: WICKET-3240
                 URL: https://issues.apache.org/jira/browse/WICKET-3240
             Project: Wicket
          Issue Type: Bug
          Components: wicket-auth-roles
    Affects Versions: 1.5-M3
         Environment: all

            Reporter: Richard Emberson


In the class AnnotationsRoleAuthorizationStrategy's  isInstantiationAuthorized 
method if
the package authorization is false but the class authorization is true, then 
the user
will be authorized.
Maybe, check the class authorization only if the authorized variable is true.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.