title: Best practice to use @PreAuthorize
body: <p>I have a service class with secured methods (<code>@PreAuthorize</code>, Spring Security). </p>
  
  <p>Is Its bad practice coding? </p>
  
  <p>Maybe should I use this annotation <code>@PreAuthorize</code> only in my controller class (<code>@Controller</code> or <code>@RestController</code>) </p>