resolveFactoryMethodIfPossible should consider nonPublicAccessAllowed flag and SecurityManager scenario [SPR-11422]

[spring-projects-issues]

Juergen Hoeller opened SPR-11422 and commented

In contrast to ConstructorResolver's actual factory method invocation algorithm, resolveFactoryMethodIfPossible - as used for annotation and return type introspection on an @Bean Method - doesn't consider the nonPublicAccessAllowed flag, and doesn't go the PrivilegedAction route in case of an active SecurityManager either. This should be made consistent.

---

Affects: 3.2.7, 4.0.1

Backported to: 3.2.8