Spring Security 3 specify multiple intercept-url access roles

Question

I am trying to setup Spring 3 security using JDBC auth. Everything is working fine apart from when I try to specify multiple access roles to an intercept-url. Eg I want anyone w

Answer 1

I had the same problem and found the answer here.
Use that line to grant access to user with both roles:

If you want to grant access to user with one of the listed roles, use:

Also, you need to add ability to use SpEL in your security *.xml, add use-expressions="true" to tag.