Order of Spring @Transactional and Spring Security @PreAuthorize

Question

So I have something like the following:

public interface  MyService {

    @PreAuthorize(\"hasPermission(T(Name).OBJ, T(Action).GET)\")
    MyObj getObj(Stri         


        

Answer 1

You can use order attribute when configuring @Transactional:

Experiment with lower values to move transaction aspect after the authorization one. Looks like also has this setting. The security aspect needs to have a higher value (lower priority) to be executed first.

See also

• Table 10.2. settings

• 7.2.4.7 Advice ordering