title: spring security permitAll not working
body: <p>I enable spring security in my system. I have two urls, and one should be without security (for now). 
  Here is my security section</p>
  
  <p></p>
  
  <pre><code>&lt;security:intercept-url pattern="/api/admin**"
                          access="permitAll" /&gt;
  &lt;security:intercept-url pattern="/api/**"
                          access="hasAnyRole('ROLE_ADMIN', 'ROLE_USER')" /&gt;
  &lt;security:http-basic /&gt;
  </code></pre>
  
  <p></p>
  
  <p>Admin section should be available without login for now, but that is not the case, accessing url: <a href="http://localhost:8080/kma/api/admin/accounting/" rel="nofollow">http://localhost:8080/kma/api/admin/accounting/</a>
  Still requires a username and password</p>