1.

Name security annotations that are allowed to use SpEL.

Answer»

Some SECURITY ANNOTATIONS that are allowed to use SpEL include: 

  • @PreAuthorize 
  • @PreFilter 
  • @PostAuthorize 
  • @PostFilter  

These PROVIDE expression-based ACCESS control. In Spring Security, @PreAuthorize is one of the most POWERFUL annotations that allows you to use SpEL. But the old @Secured annotation cannot use it, for example you cannot write @Secured("hasRole('ROLEADMIN')"), but you can do @PreAuthorize("hasRole('ROLEADMIN')"). 



Discussion

No Comment Found