@Override
  public void setServletContext(ServletContext servletContext) {
    securityService = (SecurityService) servletContext
        .getAttribute(HttpService.SECURITY_SERVICE_SERVLET_CONTEXT_PARAM);
  }
calls used in @PreAuthorize tag needs to return a boolean
geode-web-api/src/main/java/org/apache/geode/rest/internal/web/security/RestSecurityService.java