asmhatre/spring-auth-demo
1
0
Fork 0
Code Activity

Add permission-evaluator module: hasPermission() with PermissionEvaluator and @EnableMethodSecurity

Browse Source 
Co-Authored-By: Claude Sonnet 5.5 <[email protected]>
Claude-Session: https://claude.ai/code/session_01YPgGH6aMbSLANL3E2HHmS6
This commit is contained in:
asmhatre
2026-10-25 16:55:23 +00:00
co-authored by Claude Sonnet 5.5
parent 6b09fe7b82
commit d1b9339951
27 changed files with 857 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
permission-evaluator/output/04-forged-owner.txt
+5
View File
@@ -0,0 +1,5 @@
document 1 before: Document[id=1, owner=alice, team=team-a, title=Q3 plan]
carol update(forged owner=carol) -> ALLOWED
document 1 after: Document[id=1, owner=carol, team=team-b, title=hijacked]
carol updateTitle(1, "hijacked") -> DENIED (AuthorizationDeniedException: Access Denied)
document 1 after: Document[id=1, owner=alice, team=team-a, title=Q3 plan]