igm

<beans>
  ...
  <bean class="security.SecurityAspect" />
  <aop:aspectj-autoproxy />
</beans>

igm

@Aspect
@Component
public class SecuredAspect {
    @Pointcut("@annotation(annotation)")
    @SuppressWarnings("unused")
    private void secured(Secured annotation) {
    }

    @Around("secured(annotation)")
    public Object aroundCachedMethods(ProceedingJoinPoint thisJoinPoint, Secured annotation)

igm

@Target({ ElementType.METHOD })
@Retention(RetentionPolicy.RUNTIME)
@Inherited
@Documented
public @interface Secured {
    Boolean admin() default false;
}

igm

@Controller
public class MyController {
    @Secured(admin = true)
    @RequestMapping(value="/show_users.html", method = RequestMethod.GET)
    public String showAllUsers(Model model) {
        ...
    }
    ...
}