PostAuthorize Method Interceptors Should Use Order from AuthorizationInterceptorsOrder

[marcusdacoregio]

AuthorizationManagerAfterMethodInterceptor creates interceptors using the PostAuthorizeAuthorizationManager. However, the order of those interceptors are hard-coded with 500. It should use the value provided by AuthorizationInterceptorsOrder.POST_AUTHORIZE.getOrder()

See

spring-security/core/src/main/java/org/springframework/security/authorization/method/AuthorizationManagerAfterMethodInterceptor.java

Line 96 in 5dae6da

interceptor.setOrder(500);