spring-projects / spring-projects/spring-security

(doc issue) permitAll/denyAll listed as "methods" in docs but are actually fields in SecurityExpressionRoot

Open Beginner friendly
#19,728 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

status: waiting-for-triage type: bug
Dominant language
Java
Stars
9.6k
Forks
6.3k
Avg merge
2d 11h
Merged PRs (30d)
52

Description

In the Method Security reference docs, under "Using Authorization Expression Fields and Methods,"

What follows is a quick overview of the most common methods:

and permitAll and denyAll are listed under the quick "overview of the most common methods".

However, in SecurityExpressionRoot , these are declared as fields, not methods:

public final boolean permitAll = true;
public final boolean denyAll = false;

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the Method Security reference section linked in the issue, then check the permitAll and denyAll declarations in SecurityExpressionRoot. Update the documentation so these entries are identified as fields rather than methods, and verify that the surrounding overview remains accurate.

Written by the indexing model from the issue text.

Assessment

Tech stack
java, spring
Domain
documentation, security
Issue type
Documentation
Difficulty
1/5
Estimated time
Under an hour
Activity status
Active
Clarity
Clearly specified
Newbie friendliness
90/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.