What methods of access rights verification mechanisms exist in Spring Security?

The access rights verification mechanism in Spring Security can be implemented in several ways:

1. Annotations on methods — for example, @PreAuthorize, @PostAuthorize, @Secured allow restricting access to methods at the code level.

@PreAuthorize("hasRole('ADMIN')")
public void adminOnlyMethod() {
    // code
}

2. Configuration at the HTTP request level — in the configuration class, you can set access rules to URLs using HttpSecurity.

http
  .authorizeRequests()
  .antMatchers("/admin/**").hasRole("ADMIN")
  .anyRequest().authenticated();

3. AccessDecisionManager and Voters — a more flexible way, where you can implement your own access decision rules.

4. Using Expression Language (SpEL) — for dynamic rights checking in annotations and configurations.

Thus, Spring Security provides both declarative and programmatic ways to control access.