瀏覽代碼

Merge branch '6.2.x'

Steve Riesenberg 1 年之前
父節點
當前提交
144b83e5f3
共有 1 個文件被更改,包括 0 次插入5 次删除
  1. 0 5
      docs/modules/ROOT/pages/servlet/authorization/method-security.adoc

+ 0 - 5
docs/modules/ROOT/pages/servlet/authorization/method-security.adoc

@@ -395,11 +395,6 @@ fun readAccountWithWrongRoleThenAccessDenied() {
 
 While `@PreAuthorize` is quite helpful for declaring needed authorities, it can also be used to evaluate more complex <<using_method_parameters,expressions that involve the method parameters>>.
 
-The above two snippets are ensuring that the user can only request orders that belong to them by comparing the username parameter to xref:servlet/authentication/architecture.adoc#servlet-authentication-authentication[`Authentication#getName`].
-
-The result is that the above method will only be invoked if the `username` in the request path matches the logged-in user's `name`.
-If not, Spring Security will throw an `AccessDeniedException` and return a 403 status code.
-
 [[use-postauthorize]]
 === Authorization Method Results with `@PostAuthorize`