How deeply does Spring AI in Action cover hasRole()?

Explains boolean evaluation, denial behavior, annotation placement, and method-security enablement without detailing role storage or expression internals.

hasRole()

As explained in Spring AI in Action

hasRole() is a Spring Security expression function that tests whether the current security context contains a specified role.

hasRole() is a Spring Security extension to SpEL that tests whether the active security context contains a specified role. Used inside @PreAuthorize, it permits a method call when the expression returns true and blocks it with AccessDeniedException when false. section 10.2

A tool such as getGameComplexity can require the PREMIUM_USER role by placing @PreAuthorize("hasRole('PREMIUM_USER')") on the @Tool method or on a Function implementation’s apply() method. Method security must be enabled with @EnableMethodSecurity. section 10.2

Role-gated game information

A premium user receives the game’s complexity, while an unauthorized user receives “That information is reserved for premium users.” The security check prevents the protected method from being invoked.

How Spring AI in Action covers it

liveBook manning.com

Read Spring AI in Action on liveBook Get the book at manning.com

Also explained in

liveBook manning.com

Spring Security in Action, Second EditionhasRole() is an authorization configuration method that permits access when the user has a specified role.

Compare how 2 books explain hasRole() →

Related concepts

roleuses · A role is a defined function, responsibility, perspective, or set of permissions associated with a participant in an organization or system.
authorizationuses · Authorization is the determination and enforcement of rules governing which subjects may access resources or perform operations.
security contextuses · A security context is security-related configuration or execution state associated with a subject, request, container, or runtime environment.
hasAnyRole()alternative to · hasAnyRole() is an authorization configuration method that permits access when the user has at least one role from a specified set.

This explainer was generated by Manning's knowledge graph from the text of Spring AI in Action. The section links point to the parts of the book it draws on.