When https://github.com/spring-projects/spring-security/pull/14712 was merged, a package tangle was introduced from the org.springframework.security.access package to the org.springframework.security.authorization package. More specifically org.springframework.security.access.prepost.PreAuthorize (and PostAuthorize) are using org.springframework.security.authorization.method.MethodAuthorizationDeniedHandler and org.springframework.security.authorization.method.MethodAuthorizationDeniedPostProcessor.
To do this, we can deprecate the Pre/PostAuthorize from the access package and then create new annotations on the authorization.method package. The old annotations can use the new ones as meta-annotations.
Comment From: marcusdacoregio
We won't do this for now, the annotations have been there for a long time and we must have a good plan about the deprecation. The package tangle has been solved via https://github.com/spring-projects/spring-security/commit/8d914ef145af40f6f9924f054ec7884ebffb2678 by adding using new annotation inside authorization.method package instead of annotation attributes in Pre/PostAuthorize