A thought...
When using a DefaultAdvisorAutoProxyCreator and an AbstractSecurityInterceptor (e.g. MethodSecurityInterceptor) with an AuthenticationManager and/or AccessDecisionManager (or their subcomponents) that need advising themselves (e.g. transactional advice) using the DefaulAdvisorAutoProxyCreator to apply it. They won't get it as the DefaulAdvisorAutoProxyCreator doesn't exist yet.
Would it be an idea as an option to specify the AuthenticationManager and AccessDecisionManager by id/name for later 'binding' on at the start of the 'invoke' method?
Regards,
Sean
--
Dr. Sean Radford, MBBS, MSc
[EMAIL PROTECTED]
http://bladesys.demon.co.uk/
------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click _______________________________________________ Home: http://acegisecurity.sourceforge.net Acegisecurity-developer mailing list Acegisecurity-developer@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer