Open
Description
There is a typo in the AnnotationsShiroAuthorizationStrategy#isActionAuthorized method, that affectes checking for RENDER and ENABLE actions of an component's configuration phase.
ShiroSecurityConstraint fail = checkInvalidInstantiation( findShiroSecurityConstraintAnnotations(componentClassAnnotations), ShiroAction.INSTANTIATE);
but shoud be
ShiroSecurityConstraint fail = checkInvalidInstantiation(findShiroSecurityConstraintAnnotations(componentClassAnnotations), _action);