Why not use the standard @RolesAllowed ? Or Spring Security's @Secured ?