From fd2515633f476322dc9186021aca6feda9383c84 Mon Sep 17 00:00:00 2001 From: aaron-to-go <67126332+aaron-to-go@users.noreply.github.com> Date: Sun, 19 Nov 2023 13:32:49 +0100 Subject: [PATCH] Fix typo in the 'Authorizing Requests' example The example request matcher listed "/resources/**", while the explanation (3) used "/static/" instead. --- .../pages/servlet/authorization/authorize-http-requests.adoc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/modules/ROOT/pages/servlet/authorization/authorize-http-requests.adoc b/docs/modules/ROOT/pages/servlet/authorization/authorize-http-requests.adoc index 298b7f8ad37..40dc8b0789d 100644 --- a/docs/modules/ROOT/pages/servlet/authorization/authorize-http-requests.adoc +++ b/docs/modules/ROOT/pages/servlet/authorization/authorize-http-requests.adoc @@ -749,7 +749,7 @@ SecurityFilterChain web(HttpSecurity http) throws Exception { Each rule is considered in the order they were declared. <2> Dispatches `FORWARD` and `ERROR` are permitted to allow {spring-framework-reference-url}web.html#spring-web[Spring MVC] to render views and Spring Boot to render errors <3> We specified multiple URL patterns that any user can access. -Specifically, any user can access a request if the URL starts with "/resources/", equals "/signup", or equals "/about". +Specifically, any user can access a request if the URL starts with "/static/", equals "/signup", or equals "/about". <4> Any URL that starts with "/admin/" will be restricted to users who have the role "ROLE_ADMIN". You will notice that since we are invoking the `hasRole` method we do not need to specify the "ROLE_" prefix. <5> Any URL that starts with "/db/" requires the user to have both been granted the "db" permission as well as be a "ROLE_ADMIN".