title: Spring Security , access="ROLE_ADMIN" Vs access="hasAnyRole('ROLE_ADMIN')
body: <p>In Spring Security: </p>
  
  <pre><code>&lt;sec:http pattern="/api/**" create-session="never"
          entry-point-ref="oauthAuthenticationEntryPoint"
          access-decision-manager-ref="accessDecisionManager"
          xmlns="http://www.springframework.org/schema/security"&gt;
          &lt;anonymous enabled="false" /&gt;
          &lt;intercept-url pattern="/api/**" access="ROLE_ADMIN" /&gt;
          &lt;custom-filter ref="resourceServerFilter" before="PRE_AUTH_FILTER" /&gt;
          &lt;access-denied-handler ref="oauthAccessDeniedHandler" /&gt;
  &lt;/sec:http&gt;
  </code></pre>
  
  <p>in this line <code>&lt;intercept-url pattern="/api/**" access="ROLE_ADMIN" /&gt;</code></p>
  
  <p>What is difference meaning if I write:</p>
  
  <p><code>&lt;intercept-url pattern="/api/**" access="hasRole('ROLE_ADMIN')" /&gt;</code></p>
  
  <p>or:</p>
  
  <p><code>&lt;intercept-url pattern="/api/**" access="hasAnyRole('ROLE_ADMIN')" /&gt;</code></p>