@ModelAttribute("allRoles") @PreAuthorize("hasAnyRole('CTRL_PERM_LIST_GET','CTRL_PERM_EDIT_GET')") public List<Role> getAllRoles() { return roleService.getRoles(); }