Lukasz Lenart created WW-5744:
---------------------------------
Summary: Remove the deprecated one-arg
AuthorizingSettableBeanProperty constructor in the REST plugin
Key: WW-5744
URL: https://issues.apache.org/jira/browse/WW-5744
Project: Struts 2
Issue Type: Task
Components: Plugin - REST
Reporter: Lukasz Lenart
Assignee: Lukasz Lenart
Fix For: 8.0.0
{{AuthorizingSettableBeanProperty(SettableBeanProperty)}} was deprecated for
removal in WW-5715: it keys authorization on Jackson's external property name,
so a member renamed with {{@JsonProperty}}, {{@JsonAlias}} or a naming strategy
is authorized under the wrong name. {{ParameterAuthorizingModule}} now installs
the wrapper through {{AuthorizingSettableBeanProperty(SettableBeanProperty,
String)}} with the Java member name; the one-arg constructor is a delegating
shim kept for callers that construct the wrapper themselves.
Remove the shim in 8.0.0.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
