web/src/main/java/org/springframework/security/web/access/DefaultWebInvocationPrivilegeEvaluator.java
public boolean isAllowed(String uri, Authentication authentication) {
		return isAllowed(null, uri, null, authentication);
	}
public boolean isAllowed(String uri, Authentication authentication) {
		return isAllowed(null, uri, null, authentication);
	}
Determines whether the user represented by the supplied <tt>Authentication</tt>
object is allowed to invoke the supplied URI.

@param uri the URI excluding the context path (a default context path setting will
be used)