<global-method-security secured-annotations="enabled">

[jaga_vvv]

The doc says it provides method security for all of the beans registered in the application context. Can somebody tells which class or filter(s) registers all the methods with the MethodSecurityInterceptor class. I am quite confused.

Thank you, Jagadish

[Tnek]

I don't understand your question, please elaborate if you need more information than below.

How I think it's done: (I'm a framework beginner myself.)

1. Use <global-method-security secured-annotations="enabled">
2. Annotate the methods you want to secure using @Secured("THE_USER_ROLE")
3. Make sure you have aspectjweaver and aspectjrt on the classpath at runtime

[jaga_vvv]

Thanks for the reply. I understood those basics, but more interested in the internals.

I am looking into this source code, but got quite confused on how the invoke method on SecurityMethodIntrecptor object is called at runtime. I guess my question is - where is pointcut and advice for all of the beans registered with the spring aop framework.