anchor.diff:  
   You could refer to the method using:
   
  -[source,xml]
  +.Refer to method
  +====
  +.Java
  +[source,java,role="primary"]
  +----
  +http
  +    .authorizeRequests(authorize -> authorize
  +        .antMatchers("/user/**").access("@webSecurity.check(authentication,request)")
  +        ...
  +    )
  +----
  +
  +.XML
  +[source,xml,role="secondary"]
   ----
   <http>
   	<intercept-url pattern="/user/**"
  
positive.code: 
  You could refer to the method using:
  
  [source,xml,attrs="-attributes"]
  ----
  <http>
  	<intercept-url pattern="/user/{userId}/**"
  
negative.code: </http>
  ----
  
  .Kotlin
  [source,kotlin,role="secondary",attrs="-attributes"]
  ----
  http {
      authorizeRequests {
          authorize("/user/{userId}/**", "@webSecurity.checkUserId(authentication,#userId)")
      }
  }
  ----
  ====
  
  In this configuration URLs that match would pass in the path variable (and convert it) into checkUserId method.
  For example, if the URL were `/user/123/resource`, then the id passed in would be `123`.
  
  === Method Security Expressions
  