anchor.diff:  
       @Override
       public void verify(Supplier<Authentication> authentication, Object object) {
  -        Collection<ConfigAttributes> attributes = this.securityMetadataSource.getAttributes(object);
  +        Collection<ConfigAttribute> attributes = this.securityMetadataSource.getAttributes(object);
           this.accessDecisionManager.decide(authentication.get(), object, attributes);
       }
   }
  
positive.code:     @Override
      public AuthorizationDecision check(Supplier<Authentication> authentication, Object object) {
          try {
              Collection<ConfigAttributes> attributes = this.securityMetadataSource.getAttributes(object);
              this.accessDecisionManager.decide(authentication.get(), object, attributes);
              return new AuthorizationDecision(true);
          } catch (AccessDeniedException ex) {
  
negative.code: 
      @Override
      public AuthorizationDecision check(Supplier<Authentication> authentication, Object object) {
          Collection<ConfigAttribute> attributes = this.securityMetadataSource.getAttributes(object);
          int decision = this.accessDecisionVoter.vote(authentication.get(), object, attributes);
          switch (decision) {
          case ACCESS_GRANTED:
  