When does the method doGetAuthorizationInfo get called in Shiro?

Question

I'm really confused about this.

Sometimes it runs, sometimes not. Can someone provide insight into the conditions under which doGetAuthorizationInfo will be called?

Thanks

Answer 1

In the Shiro Docs :

This implementation obtains the actual AuthorizationInfo object from the subclass's implementation of doGetAuthorizationInfo, and then caches it for efficient reuse if caching is enabled

The function, as to my experience, is only called when the authorization info is actually needed. If Shiro is configured to use a cache it will not call it every time eg roles are checked.

Answer 2

Shiro Subject每次调用hasRole或isPermitted方法时，都会调用此方法。