The problem can be defined by the following example:
I have a class MainClass which is related with another class called AssociatedClass by
MainClass
AssociatedClass
Apply an excerpt projection to the associated entity's repository and add there security checks as described in
Spring Data Rest: Security based projection
The associated resource will be returned but you can hide certain fields or all of them.