You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@struts.apache.org by "Lukasz Lenart (Jira)" <ji...@apache.org> on 2026/09/14 15:28:00 UTC

[jira] [Created] (WW-5744) Remove the deprecated one-arg AuthorizingSettableBeanProperty constructor in the REST plugin

Lukasz Lenart created WW-5744:
---------------------------------

             Summary: Remove the deprecated one-arg AuthorizingSettableBeanProperty constructor in the REST plugin
                 Key: WW-5744
                 URL: https://issues.apache.org/jira/browse/WW-5744
             Project: Struts 2
          Issue Type: Task
          Components: Plugin - REST
            Reporter: Lukasz Lenart
            Assignee: Lukasz Lenart
             Fix For: 8.0.0


{{AuthorizingSettableBeanProperty(SettableBeanProperty)}} was deprecated for removal in WW-5715: it keys authorization on Jackson's external property name, so a member renamed with {{@JsonProperty}}, {{@JsonAlias}} or a naming strategy is authorized under the wrong name. {{ParameterAuthorizingModule}} now installs the wrapper through {{AuthorizingSettableBeanProperty(SettableBeanProperty, String)}} with the Java member name; the one-arg constructor is a delegating shim kept for callers that construct the wrapper themselves.

Remove the shim in 8.0.0.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)