@RequestMapping(value = "do_something", method = GET)
@RequiresAuthentication
@RequiresRoles("DO_SOMETHING")
public List<User> dontHavePermission() {
return userRepo.findAll();
}
@RequestMapping(method = GET)
@RequiresAuthentication
@RequiresRoles("ADMIN")
public List<User> getAll() {
return userRepo.findAll();
}
