ViewProviderAccessDelegate using accessDecisionManager

If an accessDecisionManager is set for Security, isAccessGranted(String beanName, UI ui) will always retrun true and leave the decision to the second hook with the actual object. If no accessDecisionManager is set, the behaviour is the same as before the change and hasAnyAuthority is used whenever there is a @Secured tag.
Thanks for the explanation. In that case I don't think we'll need more configuration at this time. You could optimize the second method, though. If there is no access decision manager, access has already been granted when the method is invoked and there is no point in checking it again.