Spring Security

Spring Security supports authorization semantics at the method level.

For instance:

@GetMapping("{id}")
@PreAuthorize("hasPermission(#id, 'PatientFile', 'read')")
public ResponseEntity<PatientFile> getPatientFile(@PathVariable long id) {
 ..
}

Big ACL provides a connector for Spring Security and Spring Security ACL

https://github.com/big-acl