Any reason why you are using 'SecurityXmlAuthorizationManager.this.configuration' instead of just 'this.configuration' or 'configuration'?

ConfigurationManagerAction is an intf so it can't be introducing any instance field namespace to collide with the outer scope.