Spring Security - Further Restricting Methods
<p>I have an application that is authorizing an OAuth2 token with Spring Security.  Using the @PreAuthorize tag, I can easily make sure that a user has a permission before allowing them to access a method:</p>

<pre><code>@PreAuthorize("#oauth2.hasScope('account.read')")
public void getAccount(int accountId);
{
    //return account
}
</code></pre>

<p>This works great at restricting users without the <em>account.read</em> permission from accessing this method.</p>

<p>The only problem is now <em>any</em> user with this permission can access <em>any</em> account.  I want to restrict the users to only access their own account.  I'm sure this is a common scenario.  How do other applications deal with this?</p>