anchor.diff:  ----
   @EnableMethodSecurity(securedEnabled = true, prePostEnabled = false)
   ----
  -====
  -
  -Additionally, note that `@EnableMethodSecurity` activates stricter enforcement of Spring Security's non-repeatable or otherwise incompatible annotations.
  -If after moving to `@EnableMethodSecurity` you see ``AnnotationConfigurationException``s in your logs, follow the instructions in the exception message to clean up your application's method security annotation usage.
  -
  -==== Publish your custom `PermissionEvaluator` as a `MethodSecurityExpressionHandler`
  -
  -`@EnableMethodSecurity` does not pick up a `PermissionEvaluator` bean.
  -Instead, it picks up the more generic `MethodSecurityExpressionHandler` to simplify the API.
  +
  +.Xml
  +[source,xml,role="secondary"]
  +----
  +<method-security secured-enabled="true" pre-post-enabled="false"/>
  +----
  +====
  +
  +'''
  +
  +[[servlet-replace-permissionevaluator-bean-with-methodsecurityexpression-handler]]
  +[%interactive]
  +* [ ] Publish a `MethodSecurityExpressionHandler` instead of a `PermissionEvaluator`
  +
  +`@EnableMethodSecurity` does not pick up a `PermissionEvaluator`.
  +This helps keep its API simple.
   
   If you have a custom {security-api-url}org/springframework/security/access/PermissionEvaluator.html[`PermissionEvaluator`] `@Bean`, please change it from:
   
  
positive.code: ----
  @EnableGlobalMethodSecurity(prePostEnabled = true)
  ----
  ====
  
  changes to:
  
  ====
  .Java
  
negative.code: ----
  @EnableGlobalMethodSecurity(securedEnabled = true)
  ----
  
  .Xml
  [source,xml,role="secondary"]
  ----
  <global-method-security secured-enabled="true"/>
  ----
  ====
  
  should change to:
  