diff --git a/config/src/main/java/org/springframework/security/config/annotation/method/configuration/GlobalMethodSecurityConfiguration.java b/config/src/main/java/org/springframework/security/config/annotation/method/configuration/GlobalMethodSecurityConfiguration.java index 91aa83b20b..e18e23a27d 100644 --- a/config/src/main/java/org/springframework/security/config/annotation/method/configuration/GlobalMethodSecurityConfiguration.java +++ b/config/src/main/java/org/springframework/security/config/annotation/method/configuration/GlobalMethodSecurityConfiguration.java @@ -242,9 +242,10 @@ public class GlobalMethodSecurityConfiguration */ protected AccessDecisionManager accessDecisionManager() { List> decisionVoters = new ArrayList<>(); - ExpressionBasedPreInvocationAdvice expressionAdvice = new ExpressionBasedPreInvocationAdvice(); - expressionAdvice.setExpressionHandler(getExpressionHandler()); if (prePostEnabled()) { + ExpressionBasedPreInvocationAdvice expressionAdvice = + new ExpressionBasedPreInvocationAdvice(); + expressionAdvice.setExpressionHandler(getExpressionHandler()); decisionVoters .add(new PreInvocationAuthorizationAdviceVoter(expressionAdvice)); }