# Package org.springframework.security.access.prepost

package org.springframework.security.access.prepost
Contains the infrastructure classes for handling the `@PreAuthorize`, `@PreFilter`, `@PostAuthorize` and `@PostFilter` annotations.

Other than the annotations themselves, the classes should be regarded as for internal framework use and are liable to change without notice.

Related Packages
Package
Description
org.springframework.security.access
Core access-control related code, including security metadata related classes, interception code, access control annotations, EL support and voter-based implementations of the central `AccessDecisionManager` interface.
Class
Description
PostAuthorize
Annotation for specifying a method access-control expression which will be evaluated after a method has been invoked.
PostFilter
Annotation for specifying a method filtering expression which will be evaluated after a method has been invoked.
PostInvocationAdviceProvider
Deprecated.
Use `AuthorizationManagerAfterMethodInterceptor` instead
PostInvocationAttribute
Deprecated.
Use `AuthorizationManagerAfterMethodInterceptor` instead
PostInvocationAuthorizationAdvice
Deprecated.
Use `AuthorizationManagerAfterMethodInterceptor` instead
PreAuthorize
Annotation for specifying a method access-control expression which will be evaluated to decide whether a method invocation is allowed or not.
PreFilter
Annotation for specifying a method filtering expression which will be evaluated before a method has been invoked.
PreInvocationAttribute
Deprecated.
Use `AuthorizationManagerBeforeMethodInterceptor` instead
PreInvocationAuthorizationAdvice
Deprecated.
Use `AuthorizationManagerBeforeMethodInterceptor` instead
PreInvocationAuthorizationAdviceVoter
Deprecated.
Use `AuthorizationManagerBeforeMethodInterceptor` instead
PrePostAdviceReactiveMethodInterceptor
Deprecated.
Use `AuthorizationManagerBeforeReactiveMethodInterceptor` or `AuthorizationManagerAfterReactiveMethodInterceptor`
PrePostAnnotationSecurityMetadataSource
Deprecated.
Use `PreAuthorizeAuthorizationManager` and `PostAuthorizeAuthorizationManager` instead
PrePostInvocationAttributeFactory
Deprecated.
Use delegation with `AuthorizationManager`