From a0dc09bfff2c34a2acbc5fa397d23d99467839b3 Mon Sep 17 00:00:00 2001
From: Michael Furman <39214039+ultimatesecpro@users.noreply.github.com>
Date: Sun, 5 Jul 2020 14:48:03 +0300
Subject: [PATCH] Set the role prefix to the empty value

Without the change the prefix role is default "ROLE_ and the demo throws the following exception:
org.springframework.security.access.AccessDeniedException: Access is denied
while access to `/post.html?id=1&amount=20.00`.
---
 .../src/main/webapp/WEB-INF/applicationContext-security.xml   | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/samples/xml/tutorial/src/main/webapp/WEB-INF/applicationContext-security.xml b/samples/xml/tutorial/src/main/webapp/WEB-INF/applicationContext-security.xml
index 295a81d73b7..f9e052d6bc2 100644
--- a/samples/xml/tutorial/src/main/webapp/WEB-INF/applicationContext-security.xml
+++ b/samples/xml/tutorial/src/main/webapp/WEB-INF/applicationContext-security.xml
@@ -61,4 +61,8 @@
 		</authentication-provider>
 	</authentication-manager>
 
+	<beans:bean id="grantedAuthorityDefaults" class="org.springframework.security.config.core.GrantedAuthorityDefaults">
+		<beans:constructor-arg value="" />
+	</beans:bean>
+
 </beans:beans>