Search code examples
grailsspring-security

Grails springSecurity reload authorities without relogin

I'm using Grails 3.3.5 and org.grails.plugins:spring-security-acl:3.2.1.

Is there any way to easily rebuild Authentication (including authorities) for non-current user on fly?

The issue is the following: admin grants user a role, but the role is taken into account only after user's relogin.

Is there any analogue like springSecurityService.reauthenticate(...) but for non-current user?

Solution

  • No, it's not possible, unless you replace the default http session mechanism with some centralized cache, allowing the admin to change session attributes for any arbitrary user on the fly.