Method security annotation

IdentityZoneEndpoints.java

@RestController
@RequestMapping("/identity-zones")
public class IdentityZoneEndpoints {

    @PreAuthorize("#id != @uaaIdentityZone.id")
    @RequestMapping(value="{id}", method = GET)
    public IdentityZone getIdentityZone(@PathVariable String id) {
        return zoneDao.retrieve(id);
    }
    
    @ExceptionHandler(AccessDeniedException.class) 
    public ResponseEntity<Void> handleAccessDeniedException(MethodArgumentNotValidException e) {
        return new ResponseEntity<>(HttpStatus.FORBIDDEN);
    }
}