Announcement Announcement Module
No announcement yet.
Intercept-url pattern Page Title Module
Move Remove Collapse
This topic is closed
Conversation Detail Module
  • Filter
  • Time
  • Show
Clear All
new posts

  • Intercept-url pattern

    Hi Guys,

    I would like to ask the following question but this is not stopped just want to know any other way to configure this setting.

    As we know the intercept-url pattern will check the ROLE_** from accessing the url


    <intercept-url pattern="/car/**" access="ROLE_ADMIN" />
    When the user have the ROLE_ADMIN he/she can access whatever method under /car, correct me if I wrong

    And now I want to configure under car any get** method can be access by ROLE_USER however after I configure the following ROLE_ADMIN user unable to access any get**

    <intercept-url pattern="/car/get**" access="ROLE_USER" />
    If the get** method can be access by ROLE_ADMIN so I need manual configure as below

    <intercept-url pattern="/car/get**" access="ROLE_USER, ROLE_ADMIN" />
    Is this the normal behavior? As the /car/** already define ROLE_ADMIN can access whatever method under the car

    Thank You

    - David

  • #2
    That is the intended and expected behavior...


    • #3
      OK and noted. Thank you for the reply