Access control in local security configurations
You can define access privileges to resources by adding Spring Security expressions in a oeablSecurity-XXXX-local.xml configuration file.
For example, the following snippet grants access to data from a status resource to any user who has either ROLE_PSCAdmin or ROLE_PSCOper privileges:
<intercept-url pattern="/status" method="GET"
access="hasAnyRole('ROLE_PSCAdmin','ROLE_PSCOper')"/>
|
For more information, see
Expression-Based Access Control in the Spring Security online documentation.