title: Allow all URLs but one in Spring security
body: <p>I would like to protect just a single URL, while allowing anonymous access for everything else. </p>
  
  <p>The Java configuration examples i'm seeing in the internet all seem to indicate that you need to explicitly <code>permitAll</code> each and every URL, and appropriate <code>hasRole</code> for URLs that need to be protected. This in my case, creates a really unwieldy java code which I have modify every time I add a new URL to the application. Is there an easier java configuration that I can use.</p>
  
  <p>And note also that in my case, the URL i'm protecting is a sub-resource, say <code>employee/me</code>, I would like <code>employee/list</code>, etc., to be anonymously accessible.</p>