anchor.diff:  </http>
   ----
   
  -or in Java configuration
  -
  -
  -[source,java]
  -----
  -http
  -    .authorizeRequests(authorize -> authorize
  -        .antMatchers("/user/**").access("@webSecurity.check(authentication,request)")
  -        ...
  -    )
  -----
  +.Kotlin
  +[source,kotlin,role="secondary"]
  +----
  +http {
  +    authorizeRequests {
  +        authorize("/user/**", "@webSecurity.check(authentication,request)")
  +    }
  +}
  +----
  +====
   
   [[el-access-web-path-variables]]
   ==== Path Variables in Web Security Expressions
  
positive.code: 
  You could refer to the method using:
  
  [source,xml,attrs="-attributes"]
  ----
  <http>
  	<intercept-url pattern="/user/{userId}/**"
  
negative.code: 
  You could refer to the method using:
  
  .Refer to method
  ====
  .Java
  [source,java,role="primary"]
  ----
  http
      .authorizeRequests(authorize -> authorize
          .antMatchers("/user/**").access("@webSecurity.check(authentication,request)")
          ...
      )
  ----
  
  .XML
  [source,xml,role="secondary"]
  ----
  <http>
  	<intercept-url pattern="/user/**"
  