SpringSecurity 的配置

@PreAuthorize("hasRole('ISADMIN') || hasAnyAuthority('admin:p','system:001')")

ref:
https://docs.spring.io/spring-security/reference/servlet/authorization/method-security.html