在学习http://www.mkyong.com/spring-security/spring-security-hello-world-example/时,出现以下错误:
Property or field 'ROLE_USER' cannot be found on object of type 'org.springframework.security.web.access.expression.
经查发现把
<security:http auto-config="true">
<security:intercept-url pattern="/admin**" access="ROLE_USER" />
</security:http>
修改成:
<security:http auto-config="true">
<security:intercept-url pattern="/admin**" access="hasRole('ROLE_USER')" />
</security:http>
即可解决此问题,另由于我学习时使用的是4.0以上版本,还需要在所有的标签上加上security:
如<http></http>需要修改为<security:http></security:http>