It seems logical to secure an entire class of controllers rather than each method. Can I do this:
@Controller
@Secured("ROLE_USER")
public class accountPages {
//Controllers
}
It seems logical to secure an entire class of controllers rather than each method. Can I do this:
@Controller
@Secured("ROLE_USER")
public class accountPages {
//Controllers
}
from Spring Security 3 - PACKT Publishing
Be aware that the method-level security annotations can also be applied at the class level as well! Method-level annotations, if supplied, will always override annotations specified at the class level