title: @PreAuthorize on a nested method in Spring controller
body: <p>I have spring bean in which I have two methods</p>
  
  <pre><code>@Secured({"ROLE_ADMIN"})
  public void update(Person person) {  
     if(person.isActive())
        changeData(person);
  }
  
  @PreAuthorize("hasPermission(#person,CHANGE_PERSON_FULL)")
  public void changeData(Person person) {
  ...
  }
  </code></pre>
  
  <p>I have added my custom <code>MethodSecurityExpressionHandler</code>. I have setup <code>@EnableGlobalMethodSecurity(securedEnabled = true, prePostEnabled = true)</code>. Everything works ok when annotation <code>@PreAuthorize</code> is above <code>update(Person person)</code>. I need to perform PreAuthorize on changeData. Is it something related to proxy? Do I need to create seperate bean with method changeData? Is it possible to force spring to check security on nested method?</p>