Attribute based access control for APIs in spring security
Attributed based access control (ABAC) for Web services