Hello All,

I'm still learning about Shiro and I'm working on permission changes at runtime. From what I've read, I need to invalidate the cached AuthorizationInfo so that a user will immediately get their new permissions. So here is my question:

If my code that manages permission changes to call clearCachedAuthorizationInfo(PrincipalCollection) on any realm that may have it cached, why is this method protected? Shouldn't it be public? As it is, I created a new public method in my custom realm just to call the protected method.

Is that a mistake? (Generally circumventing protected/private is bad.) What is the preferred way?

Thanks for your help.

Sincerely,
Stephen McCants

--
Stephen McCants
Senior Software Engineer
Healthcare Control Systems
1-877-877-8795 x116

Reply via email to