websphere: Unsupported configuration attributes: [permitAll] using spring

Question

I get the following error...

Unsupported configuration attributes: [permitAll]

When adding ....

<sec:intercept-url pattern="/nonsecure/**" access="permitAll" />

I'm on Websphere with Spring 2.5.

Can anyone help?

Jeff Porter

Answer 1

you have to add use-expressions tag to your http configuration in security xml for example:

<http auto-config="true" use-expressions="true">
...
...
</http>

Answer 2

To be able to use expressions such as [permitAll] you have to add a a WebExpressionVoter to your AccessDecisionManager