taglibs/src/main/java/org/springframework/security/taglibs/authz/AbstractAuthorizeTag.java
public boolean authorize() throws IOException {
		boolean isAuthorized;

		if (StringUtils.hasText(getAccess())) {
			isAuthorized = authorizeUsingAccessExpression();

		}
		else if (StringUtils.hasText(getUrl())) {
			isAuthorized = authorizeUsingUrlCheck();

		}
		else {
			isAuthorized = false;

		}

		return isAuthorized;
	}
public boolean authorize() throws IOException {
		boolean isAuthorized;

		if (StringUtils.hasText(getAccess())) {
			isAuthorized = authorizeUsingAccessExpression();

		}
		else if (StringUtils.hasText(getUrl())) {
			isAuthorized = authorizeUsingUrlCheck();

		}
		else {
			isAuthorized = false;

		}

		return isAuthorized;
	}
Make an authorization decision by considering all &lt;authorize&gt; tag attributes.
The following are valid combinations of attributes:
<ul>
<li>access</li>
<li>url, method</li>
</ul>
The above combinations are mutually exclusive and evaluated in the given order.

@return the result of the authorization decision
@throws IOException