@Retention(value=RUNTIME) @PreAuthorize(value="hasAnyRole(\'ROLE_ADMINISTRATOR\',\'ROLE_USER_ADMIN\') or #userId == authentication.userId()") public @interface IsSelfOrAdmin