I have the following interface method on which I am applying @PreAuthorize :
@PreAuthoriz
@PreAuthorize(\"doSomething(#user.id)\") void something(User user,
Spring Security has a better answer for this problem now:
http://docs.spring.io/spring-security/site/docs/3.2.5.RELEASE/reference/htmlsingle/#access-control-using-preauthorize-and-postauthorize
Basically, you can use the @P annotation or @Param annotation if you are using < JDK 8.