Snippet

Method-Level Security with @PreAuthorize

Spring Security's @PreAuthorize allows you to define access control rules directly on methods using SpEL (Spring Expression Language).

snippet.java

java

@Service
public class AdminService {
 
    @PreAuthorize("hasRole('ADMIN')")
    public void deleteUser(Long id) {
        // Business logic to delete user
    }
}

spring

Breakdown

@PreAuthorize("hasRole('ADMIN')")

Checks if the currently authenticated user has the 'ADMIN' role before entering the method.

Previous snippet Next snippet

More Intermediate Java exercises →

Method-Level Security with @PreAuthorize

Related