Hm, still no luck with that. I changed the following to include
secured-annotations="enabled"
<global-method-security secured-annotations="enabled">
<protect-pointcut expression="execution(*
*..service.UserManager.getUsers(..))" access="ROLE_ADMIN"/>
<protect-pointcut expression="execution(*
*..service.UserManager.removeUser(..))" access="ROLE_ADMIN"/>
<protect-pointcut expression="execution(*
*..service.UserManager.disableUser(..))" access="ROLE_ADMIN"/>
</global-method-security>
But still no luck.
Regards,
Chris
Mike Horwitz wrote:
>
> You need to enable support for the @Secured aspect in the spring security
> configuration. This is the section you need: http://tinyurl.com/7fc73s
>
> Mike
>
> 2009/1/14 Christian Decker <[email protected]>
>
>>
>> Hi all,
>>
>> I was looking for an easy and intuitive way to restrict access to
>> managers.
>> I found that Spring Security does support a @Secured annotation, but I
>> have
>> been unable to get it to work. Do I have to enable annotations for this
>> kind
>> of thing? And if yes, where?
>>
>> regards,
>> Chris
>>
>> -----
>> Christian Decker
>> http://blog.snyke.net
>> --
>> View this message in context:
>> http://www.nabble.com/Securing-managers-using-annotations-tp21448272s2369p21448272.html
>> Sent from the AppFuse - User mailing list archive at Nabble.com.
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: [email protected]
>> For additional commands, e-mail: [email protected]
>>
>>
>
>
-----
Christian Decker
http://blog.snyke.net
--
View this message in context:
http://www.nabble.com/Securing-managers-using-annotations-tp21448272s2369p21465188.html
Sent from the AppFuse - User mailing list archive at Nabble.com.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
