春季安全@PreAuthorize

Question

I'm trying to access the current active profile via the Spring Security @PreAuthorize annotation like

@PreAuthorize("hasRole('SOME_' + #{ environment.activeProfiles[0] } + '_ROLE')")

I'm receiving the following exception:

EL1043E: Unexpected token. Expected 'identifier' but was 'lcurly({)'

Is there a way to do this without writing a custom expression handler?

Answer 1

Got it working in a convoluted way. Seems like it should be more straightforward. This feels like a hack:

@PreAuthorize("hasRole('SOME_' + #profile + '_ROLE')")
public void method(@Value("#{ environment.getActiveProfiles()[0]?.toUpperCase() }") String profile)