أمان الدوال (Method security)

في هذا الدرس

protect service methods with annotations.

الموضوعات المخطط لها

• Turn it on with @EnableMethodSecurity.
• @PreAuthorize("hasRole('ADMIN')") runs before the method.
• SpEL can use method arguments and the current user: @PreAuthorize("#id == authentication.principal.id").
• Put it on the service layer so every caller, not only controllers, is covered.
• URL rules are a first layer; method rules are a second layer (defense in depth).