Spring Security all rolles except anonymous -

hi have spring security application

<http auto-config="true">     <intercept-url pattern="/**" />     <form-login authentication-failure-handler-ref="authenticationfailurehandler" authentication-success-handler-ref="authenticationsuccesshandler" login-page="${loginurl}" authentication-failure-url="${loginurl}" />     <logout logout-url="/logout" invalidate-session="true" success-handler-ref="logoutsuccesshandler" />     <anonymous enabled='false'/> </http> 

but anonymous user not intercepted, how can allow roles not role_anonymous?

try is_authenticated_fully:

<intercept-url pattern="/**" access="is_authenticated_fully" /> 

you can same thing using spel expression:

<http auto-config="true" use-expressions="true">     ...             <intercept-url pattern="/**" access="isauthenticated()" />             ... </http> 

all available expressions listed here. in general spel expressions more flexible.