https://schegge.de/2019/05/eigene-permissionevaluator-mit-spring-security/