anchor.diff:      @Override
       public AuthorizationDecision check(Supplier<Authentication> authentication, Object object) {
           try {
  -            Collection<ConfigAttributes> attributes = this.securityMetadataSource.getAttributes(object);
  +            Collection<ConfigAttribute> attributes = this.securityMetadataSource.getAttributes(object);
               this.accessDecisionManager.decide(authentication.get(), object, attributes);
               return new AuthorizationDecision(true);
           } catch (AccessDeniedException ex) {
  
positive.code: 
      @Override
      public void verify(Supplier<Authentication> authentication, Object object) {
          Collection<ConfigAttributes> attributes = this.securityMetadataSource.getAttributes(object);
          this.accessDecisionManager.decide(authentication.get(), object, attributes);
      }
  }
  
negative.code: 
      @Override
      public AuthorizationDecision check(Supplier<Authentication> authentication, Object object) {
          Collection<ConfigAttribute> attributes = this.securityMetadataSource.getAttributes(object);
          int decision = this.accessDecisionVoter.vote(authentication.get(), object, attributes);
          switch (decision) {
          case ACCESS_GRANTED:
  