Grails Spring Security ACL Plugin

See documentation for further information.

v5.0.0 changes

Caching

The default cache manager has changed to JCacheCacheManager.

Method parameter discovery

The behavior of parameter discovery has changed to align with Spring Security 6 default behavior. This may require code changes if you are utilizing ACL annotations that reference method parameters. You will need to add the P annotation to reference method parameters. This is documented in the Spring Security reference doc under the Using Method Parameters section.

Previously if you had code similar to:

@PreAuthorize("hasPermission(#contract, 'write')")
public void updateContact(Contact contact) {
    ...
}

This should be changed to:

import org.springframework.security.core.parameters.P

@PreAuthorize("hasPermission(#contract, 'write')")
public void updateContact(@P("contract") Contact contact) {
    ...
}

Since parameter contract is referenced in the @PreAuthorize annotation, it should now be annotated with @P.