如何做到hasPermission没有检查字段ID？

I have some controller:

我有一些控制器：

@Override
@RequestMapping(value = "/createOrUpdate.html", method = RequestMethod.POST)
@Transactional
@PreAuthorize("hasPermission(#message, 'CREATE')")
public String form(@Valid final Message message, final Model model) {
    if (message.getId() == null) {
        someService.save(message);
        AclManager.create(message);
    } else {
        someService.update(message);
        AclManager.update(message);
    }
    return "main";
}
@Override