Browse Source

SEC-1456: Set rtexprvalue=true for "url" attribute in access tag to allow dynamic values (such as URL of current page).

Luke Taylor 15 years ago
parent
commit
e6e168f127
1 changed files with 1 additions and 2 deletions
  1. 1 2
      taglibs/src/main/resources/META-INF/security.tld

+ 1 - 2
taglibs/src/main/resources/META-INF/security.tld

@@ -9,7 +9,6 @@
     <uri>http://www.springframework.org/security/tags</uri>
     <uri>http://www.springframework.org/security/tags</uri>
     <description>
     <description>
         Spring Security Authorization Tag Library
         Spring Security Authorization Tag Library
-        $Id$
     </description>
     </description>
 
 
     <tag>
     <tag>
@@ -33,7 +32,7 @@
         <attribute>
         <attribute>
             <name>url</name>
             <name>url</name>
             <required>false</required>
             <required>false</required>
-            <rtexprvalue>false</rtexprvalue>
+            <rtexprvalue>true</rtexprvalue>
             <description>
             <description>
                 A URL within the application. If the user has access to this URL (as determined by
                 A URL within the application. If the user has access to this URL (as determined by
                 the AccessDecisionManager), the tag body will be evaluated. If not, it will
                 the AccessDecisionManager), the tag body will be evaluated. If not, it will