<sec:authorize> 访问属性中的 EL

Question

不能在访问属性中使用EL吗？我不喜欢在标签中硬编码角色名称，而是想使用一个常量。但它抛出一个异常说：

org.apache.jasper.JasperException: abc.jsp(19,4) According to TLD or
attribute direc tive in tag file, attribute access does not accept
any expressions

Here is what I have in jsp(using unstandard taglib for constants):

<%@taglib uri="http://jakarta.apache.org/taglibs/unstandard-1.0" prefix="un"%>
<un:useConstants className="com.xxx.PrivilegeConstants" var="privilege" />
.....

<sec:authorize access="hasRole('${privilege.USER_ROLE}')">  // throwing ex here
   security content here....
</sec:authorize>    

Is there any other alternative? Thanks in advance...

Answer 1

看起来支持是后来添加的。请参阅 JIRA here。我猜使用添加此支持的版本应该可以工作。