Pre-Authorize Checks on Methods

[godwinpinto]

Feature:
Currently an authenticated system user has access to all features. This feature request call for creation of methods or sections using Method Security in spring to allow only access to set in DB

Why:
A User facing application API may have access to all TOTP APIs other than unblock. While administration API may not have access to generate TOTP or QR. This will clearly segregate the purpose of role for which system users are being created.

Solution:

1. Create a feature table in database that will decide which methods are accessible to which system user.
2. Using method security and Spring grant authority check at method level on which methods are allowed access.