I have this code in my Web Security Config:
@Override protected void configure(HttpSecurity http) throws Exception { http .authorizeRequests
Spring security adds the prefix "ROLE_" by default.
If you want this removed or changed, take a look at
How to change role from interceptor-url?
EDIT: found this as well: Spring Security remove RoleVoter prefix