first state of annotation based security
remove accessFilter from GridFsService
public and refactor constructor for test usage
use more meaningful names for constants
secure all public methods
implement permission evaluator
more tests for method security
use spring security for method level security