title: @EnableGlobalMethodSecurity vs @EnableWebSecurity
body: <p>I am developing a REST API using Spring 4. I would like to secure some of the endpoints using Spring Security, but based on what I've read this can be done with either <code>@EnableGlobalMethodSecurity</code> or <code>@EnableWebSecurity</code>. Unfortunately, the documentation that I have found for these don't clearly explain what they do (or how they compare). If I want to secure a Spring REST API with authentication and authorization based on data and relationships declared in a standard relational database, what is the recommended method for achieving this in Spring 4?</p>