关于Acegi方法级别保护的问题

以下是我配置的Acegi方法拦截,但是总是出错:
1。首先是我的代理对象


<bean id="autoProxyCreator" class="org.springframework.aop.framework.autoproxy.BeanNameAutoProxyCreator">
<property name=
"interceptorNames">
<value>securityInterceptor</value>
</property>
<property name=
"beanNames">
<list>
<value>aopService</value>
</list>
</property>
</bean>

2。方法拦截器

<bean id="securityInterceptor" class="net.sf.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor">
<property name=
"validateConfigAttributes"><value>true</value></property>
<property name=
"authenticationManager">
<ref bean=
"authenticationManager"/>
</property>
<property name=
"accessDecisionManager">
<ref local=
"httpRequestAccessDecisionManager"/>
</property>
<property name=
"runAsManager"><ref bean="runAsManager"/></property>
<property name=
"objectDefinitionSource">
<value>
web.aop.aopService.sayhello=AUTH_USER1dd
</value>
</property>
</bean>

3。最后是我要拦截方法所在的bean

public class aopService implements aop{

public void sayhello() {
System.out.println("hello world);
}

public void saybye() {
System.out.println(
"good bye);
}
}

按道理来说方法sayhello的访问是需要AUTH_USER_NO的,但是我以权限AUTH_USER进入,却没有被拦截?!

Acegi配置方法级别保护是比较复杂,我也曾经花很长时间也没有配置成功,参考appfuse也没有用,据说spring2.0简化aop配置,可能相应acegi也简单一些