Question

I am considering to utilize Expression-Based Access Control from Spring Security 3.0.

The documentation says: You can access any of the method arguments by name as expression variables, provided your code has debug information compiled in.

That means that I have to have debug info left in my production wars and jars to properly use Expression-Based Access Control. For me it seems not very good idea at all.

Please tell me your opinions on this issue, so I can summarize your expirience to deside where I go for it or not.

Thank you in advance!
Max

Answer 1

Please see Spring security annotations with EL — requires debug information compiled in?