소스 검색

Merge branch '6.2.x'

Steve Riesenberg 1 년 전
부모
커밋
144b83e5f3
1개의 변경된 파일0개의 추가작업 그리고 5개의 파일을 삭제
  1. 0 5
      docs/modules/ROOT/pages/servlet/authorization/method-security.adoc

+ 0 - 5
docs/modules/ROOT/pages/servlet/authorization/method-security.adoc

@@ -395,11 +395,6 @@ fun readAccountWithWrongRoleThenAccessDenied() {
 
 While `@PreAuthorize` is quite helpful for declaring needed authorities, it can also be used to evaluate more complex <<using_method_parameters,expressions that involve the method parameters>>.
 
-The above two snippets are ensuring that the user can only request orders that belong to them by comparing the username parameter to xref:servlet/authentication/architecture.adoc#servlet-authentication-authentication[`Authentication#getName`].
-
-The result is that the above method will only be invoked if the `username` in the request path matches the logged-in user's `name`.
-If not, Spring Security will throw an `AccessDeniedException` and return a 403 status code.
-
 [[use-postauthorize]]
 === Authorization Method Results with `@PostAuthorize`