How can I programmatically access the contents of the intercept-url declarations (from the <http://www.springframework.org/schema/security> schema)? E.g., 

```
<http auto-config='true'>
    <intercept-url pattern="/static/**" filters="none" access="IS_AUTHENTICATED_ANONYMOUSLY" />
    <intercept-url pattern="/**" access="ROLE_USER" />
    ...
</http>

```

Spring security role mapping is used to restrict access to certain pages. I want to extract the same role mapping information (the *pattern* and *accept* attributes) to be able to only show those pages in the html-menu that each role has access to see. 

I've had a look at the `HttpConfigurationBuilder`, but it's package protected and doesn't seem to offer so much information. I've also tried: 

```
  FilterSecurityInterceptor interceptor = appContext.getBean(FilterSecurityInterceptor.class);
  if (interceptor != null) {
      for (ConfigAttribute attr : interceptor.getSecurityMetadataSource().getAllConfigAttributes()) {
          // Extract the attributes ... 
          attr.getAttribute();
      }
  }

```

but I only managed to access the roles, not the url patterns.