java - 是否可以在整个类上添加 @Secured 或 @PreAuthorized 注释

Question

保护整个 Controller 类而不是每个方法似乎是合乎逻辑的。我可以这样做吗:

@Controller
@Secured("ROLE_USER")
public class accountPages {
   //Controllers
}

Answer 1

来自 Spring Security 3 - PACKT 发布

Be aware that the method-level security annotations can also be applied at the class level as well! Method-level annotations, if supplied, will always override annotations specified at the class level