title: From where hasRole from @PreAuthorize take its values in Spring?
body: <p>Hi I am new to Spring and I am trying to understand the security model a little more.
  In our project we controller which method is annotated with </p>
  
  <pre><code>@PreAuthorize("hasRole('REPORT_VIEW')")
  </code></pre>
  
  <p>So I am wondering from where this <code>REPORT_VIEW</code> comes from is it ENUM or is based on some xml configuration? I search in the files but I can't find <code>REPORT_VIEW</code> as word.</p>
  
  <p>From here:
  <a href="http://www.mkyong.com/spring-security/spring-security-access-control-example/" rel="nofollow">http://www.mkyong.com/spring-security/spring-security-access-control-example/</a></p>
  
  <p>I saw that there is configuration security-context.xml  where </p>
  
  <pre><code>&lt;user-service&gt;
          &lt;user name="mkyong" password="password" authorities="ROLE_USER" /&gt;
          &lt;user name="eclipse" password="password" authorities="ROLE_ADMIN" /&gt;
  &lt;/user-service&gt;
  </code></pre>
  
  <p>In my project</p>
  
  <pre><code>&lt;sec:authentication-manager&gt;
          &lt;sec:authentication-provider user-service-ref="clientDetailsUserService" /&gt;
  &lt;/sec:authentication-manager&gt;
  
  &lt;bean id="clientDetailsUserService"
          class="org.springframework.security.oauth2.provider.client.ClientDetailsUserDetailsService"&gt;
          &lt;constructor-arg ref="clientDetails" /&gt;
  &lt;/bean&gt;
  </code></pre>
  
  <p>So I as developer who wants to create some controller from where to understand which are the roles for the application?</p>