title: spring not enforcing method security annotations
body: <p>I'm some what lost as to why spring isn't enforcing the @Secured("ROLE_USER") on my service interface.  My controllers are established using annotations.</p>
  
  <p>An example of my service Interface</p>
  
  <pre><code>public interface MyServiceManager {
  
      @Secured("ROLE_USER")
      public void delete(int cid);
  
      @RolesAllowed({"ROLE_USER"})
      public Contact getContact(int contactId);
  }
  </code></pre>
  
  <p>my security-context:</p>
  
  <pre><code>&lt;global-method-security   secured-annotations="enabled" jsr250-annotations="enabled"&gt;
  &lt;/global-method-security&gt;
  
  &lt;http auto-config="true" &gt;
      &lt;intercept-url pattern="/secure/**" access="ROLE_SUPERVISOR" /&gt;
      &lt;intercept-url pattern="/addcontact**" access="IS_AUTHENTICATED_REMEMBERED" /&gt;
      &lt;intercept-url pattern="/**" access="IS_AUTHENTICATED_ANONYMOUSLY" /&gt;
  
      &lt;concurrent-session-control max-sessions="1"
          exception-if-maximum-exceeded="true"/&gt;
      &lt;form-login login-page="/login.jsp" authentication-failure-url="/login.jsp?login_error=1"/&gt;
      &lt;logout logout-success-url="/welcome.do" logout-url="/logout"/&gt;
  &lt;/http&gt;
      &lt;authentication-provider&gt;
      &lt;password-encoder hash="md5"/&gt;
      &lt;user-service&gt;
          &lt;user name="rod" password="a564de63c2d0da68cf47586ee05984d7" authorities="ROLE_SUPERVISOR, ROLE_USER, ROLE_TELLER" /&gt;
      &lt;/user-service&gt;
  &lt;/authentication-provider&gt;
  </code></pre>