Spring Security - Third Edition

Prefiltering collections with @PreFilter

The @PreFilter annotation can be applied to a method to filter collection elements that are passed into a method based on the current security context. Functionally, once it has a reference to a collection, this annotation behaves exactly the same as the @PostFilter annotation, with a couple of exceptions, as follows:

• The @PreFilter annotation supports only collection arguments and does not support array arguments.
• The @PreFilter annotation takes an additional, optional filterTarget attribute which is used to specifically identify the method parameter and filter it when the annotated method has more than one argument.
• As with @PostFilter, keep in mind that the original collection passed to the method ...