Configuration methods for URL security



hasAnyAuthority(String…)
User is permitted the access if user has any of give roles authorities.

hasAnyRole(String…)
User is permitted the access if user has any of give roles.

hasAuthority(String)
User is permitted the access if user has given authority.

hasIpAddress(String)
Access Allowed if the request is from the given IP.

hasRole(String)
Access allowed if the user has the role given in argument.

access(String)
Access allowed if the Spring Expression is evaluated to true.

anonymous()
Access allowed to all the anonymous users.

permitAll()
Access allowed unconditionally.

rememberMe()
Access allowed to users who are authenticated using the remember-me feature.

denyAll()
Acess Denied unconditionally

fullyAuthenticated()
Access allowed if the user is authenticated fully (not using the remembered feature)

not()
It will negate(reverse) the effect of any of other allowed methods.

authenticated()

Access allowed to authenticated users only.