Spring Security - Third Edition

Configuring SecurityExpressionHandler

We'll need to configure <global-method-security> to enable annotations (where we'll annotate based on the expected ACL privilege), and reference a custom access decision manager.

We will also need to provide an o.s.s.access.expression.SecurityExpressionHandler implementation that is aware of how to evaluate permissions. Update your SecurityConfig.java configuration, as follows:

    src/main/java/com/packtpub/springsecurity/configuration/SecurityConfig.java     @EnableGlobalMethodSecurity(prePostEnabled = true)    @Import(AclConfig.class)    public class SecurityConfig extends WebSecurityConfigurerAdapter {

This is a bean reference to the DefaultMethodSecurityExpressionHandler object that we have defined in AclConfig.java ...