This chapter will introduce access control lists (ACLs) in the context of Spring Security.
Access control lists can be thought of as an extension to the business-level security rules we reviewed in Chapter 6. In this case, however, we’ll be looking at more fine-grained rules to secure individual domain objects, instead of the relatively coarse-grained rules used to secure method calls on services.
What this means is that ACLs are in charge of securing instances of domain classes (such as a Forum class, a Cart class, ...
