@Secured Annotation Not Working

[Mike London]

I have a method in a @Controller where I ONLY want that method to execute if the user role="ADMIN".

This method handles the POST from a JSP as shown below.

@RequestMapping(method = RequestMethod.POST)
@Secured("ADMIN")

The problem is that, regardless of the user role, the code in the method executes!

I've tried adding an additional point-cut to the security context file for that @Controller class, but that didn't work either.

Look forward to any suggestions.

Thanks,

mike