protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principalCollection) {
         String username = (String) principalCollection.getPrimaryPrincipal();
         List<Resources> resources =loginservice.getRoleById(username);
         List<String> roles =new ArrayList<String>();
         for (Resources  r: resources){
             roles.add(r.getRole());
         }
        SimpleAuthorizationInfo info = new SimpleAuthorizationInfo();
        info.addRoles(roles);
        if( !username.equals("MANAGER") ){
            return info ;
        }else {
            List<String> pre = new ArrayList<String>();
            pre.add("user:insert");
            info.addStringPermissions(pre);
            return info;
        }

    @RequestMapping("/toinsert")
    @RequiresPermissions("user:insert")
    public String toinsert(){
        return "getuser/userINsert";
    }