use spring security object to validate menu