File tree

1 file changed

+5
-6
lines changed

1 file changed

+5
-6
lines changed
Original file line numberDiff line numberDiff line change
@@ -90,8 +90,8 @@ two more sub-scopes:
9090
Pre-Authorization Decisions
9191
---------------------------
9292

93-
For pre-authorization decisions, that is decisions before any method, or
94-
secure action is invoked, we rely on the proven AccessDecisionManager service
93+
For pre-authorization decisions, that is decisions made before any secure method (or
94+
secure action) is invoked, we rely on the proven AccessDecisionManager service
9595
that is also used for reaching authorization decisions based on roles. Just
9696
like roles, the ACL system adds several new attributes which may be used to
9797
check for different permissions.
@@ -142,10 +142,9 @@ Built-in Permission Map
142142
Permission Attributes vs. Permission Bitmasks
143143
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
144144

145-
Attributes are used by the AccessDecisionManager, just like roles are
146-
attributes used by the AccessDecisionManager. Often, these attributes
147-
represent in fact an aggregate of integer bitmasks. Integer bitmasks on the
148-
other hand, are used by the ACL system internally to efficiently store your
145+
Attributes are used by the AccessDecisionManager, just like roles. Often, these
146+
attributes represent in fact an aggregate of integer bitmasks. Integer bitmasks on
147+
the other hand, are used by the ACL system internally to efficiently store your
149148
users' permissions in the database, and perform access checks using extremely
150149
fast bitmask operations.
151150

0 commit comments

Comments
 (0)