在spring中利用security怎么实现自定义决策管理器

public int vote(Authentication authentication, Object object, Collection<ConfigAttribute> attributes) {   int result = ACCESS_ABSTAIN;   Collection<&#63; extends GrantedAuthority> authorities = extractAuthorities(authentication);   for (ConfigAttribute attribute : attributes) {     if (this.supports(attribute)) {       result = ACCESS_DENIED;       // Attempt to find a matching granted authority       for (GrantedAuthority authority : authorities) {         if (attribute.getAttribute().equals(authority.getAuthority())) {           return ACCESS_GRANTED;         }       }     }   }   return result; } Collection<&#63; extends GrantedAuthority> extractAuthorities(Authentication authentication) {   return authentication.getAuthorities(); }