Controller specific permissions should be handled when using SOSIniAuthorizingRealm

Current Situation

When using SOSIniAuthorizingRealm as the iniRealm the controller specific permissions are not considered.

E.g. when a role is defined as

myRole = sos:products:joc, \
test:sos:products:controller

the user aUser that do have the role myRole do have all controller permissions for all controllers.

Desired Behavior

When a role is defined as

myRole = sos:products:joc, \
test:sos:products:controller

the user aUser that do have the role myRole should have access to controller test only.

Workaround

Deactivate the SOSIniAuthorizingRealm

#sosIniRealm = com.sos.auth.shiro.SOSIniAuthorizingRealm
#securityManager.realms = $anyRealm,$sosIniRealm

securityManager.realms = $anyRealm,$iniRealm

When deactivating the SOSIniAuthorizingRealm all users will be logged out when the shiro.ini configuration file is changed.