Browse Source

Polish Method Security Preparation Steps

- Add instruction to declare 5.8 defaults

Issue gh-11337
Josh Cummings 2 years ago
parent
commit
e900ca3a86
1 changed files with 38 additions and 7 deletions
  1. 38 7
      docs/modules/ROOT/pages/migration.adoc

+ 38 - 7
docs/modules/ROOT/pages/migration.adoc

@@ -519,11 +519,47 @@ xref:reactive/authorization/method.adoc[Method Security] has been xref:reactive/
 
 
 '''
 '''
 
 
+In Spring Security 5.8, `useAuthorizationManager` was added to {security-api-url}org/springframework/security/config/annotation/method/configuration/EnableReactiveMethodSecurity.html[`@EnableReactiveMethodSecurity`] to allow applications to opt in to ``AuthorizationManager``'s features.
+
+==== Declare the 5.8 default
+
+First, declare the 5.8 default:
+
+====
+.Java
+[source,java,role="primary"]
+----
+@EnableReactiveMethodSecurity
+----
+
+.Kotlin
+[source,kotlin,role="secondary"]
+----
+@EnableReactiveMethodSecurity
+----
+====
+
+to:
+
+====
+.Java
+[source,java,role="primary"]
+----
+@EnableReactiveMethodSecurity(useAuthorizationManager = false)
+----
+
+.Kotlin
+[source,kotlin,role="secondary"]
+----
+@EnableReactiveMethodSecurity(useAuthorizationManager = false)
+----
+====
+
+This is helpful because, if the remaining preparation steps cannot be taken, you can still upgrade to 6.0 while keeping this feature as-is.
+
 [[reactive-change-to-useauthorizationmanager]]
 [[reactive-change-to-useauthorizationmanager]]
 ==== Change `useAuthorizationManager` to `true`
 ==== Change `useAuthorizationManager` to `true`
 
 
-In Spring Security 5.8, `useAuthorizationManager` was added to {security-api-url}org/springframework/security/config/annotation/method/configuration/EnableReactiveMethodSecurity.html[`@EnableReactiveMethodSecurity`] to allow applications to opt-in to ``AuthorizationManager``'s features.
-
 To opt in, change `useAuthorizationManager` to `true` like so:
 To opt in, change `useAuthorizationManager` to `true` like so:
 
 
 ====
 ====
@@ -556,11 +592,6 @@ changes to:
 ----
 ----
 ====
 ====
 
 
-[NOTE]
-=====
-In 6.0, `useAuthorizationManager` defaults to `true`.
-=====
-
 '''
 '''
 
 
 [[reactive-check-for-annotationconfigurationexceptions]]
 [[reactive-check-for-annotationconfigurationexceptions]]