title: @Secured service methods and spring ws
body: <p>I have the following project structure:</p>
  
  <p>base project (service layer, model)
    web project
    webservice project</p>
  
  <p>where both the web project and the web service project depend on the base project and use services provided by it.</p>
  
  <p>I make heavy use of the Spring Framework which means the Services are Spring Beans with methods secured by the <strong>@Secured</strong> Annotation and <strong>Spring Security</strong>. I created an <strong>Voter</strong> extending the AbstractAclVoter that checks client permissions.</p>
  
  <p>The web project uses <strong>Spring MVC</strong> and the web service project <strong>Spring WS</strong> with @Endpoint Annotations and the <strong>XwsSecurityInterceptor</strong>.</p>
  
  <p>Here is my problem: </p>
  
  <p>The permissions are checked if a call comes from a web project controller or in JUnit tests of the base project but requests from the web service project are not checked for the correct permission - my <strong>Voter</strong> is not called!</p>
  
  <ul>
  <li>Has this something to do with the <strong>XwsSecurityInterceptor</strong>?</li>
  <li>Do I need the <strong>DelegatingFilterProxy</strong> in the web service project too? (I have
  no ContextLoaderListener there because everything is configured by
  the MessageDispatcherServlet config)</li>
  </ul>