如何通过spring rest api限制对子实体和父实体的某些字段的访问

public class ParentEntity {
    private String publicField;
    @JsonIgnore
    private String privateField;
    // getters and setters
}

public class ParentEntity {
    @JsonView(PublicView.class)
    private String publicField;
    @JsonView(PrivateView.class)
    private String privateField;
    // getters and setters
}

public class PublicView {}
public class PrivateView {}

@RestController
public class MyController {
    @JsonView(PublicView.class)
    @GetMapping("/parent")
    public ParentEntity getParent() {
        // 返回父实体对象
    }
    
    @JsonView(PrivateView.class)
    @GetMapping("/child")
    public ChildEntity getChild() {
        // 返回子实体对象
    }
}

@RestController
public class MyController {
    @PreAuthorize("hasPermission(#parentEntity, 'read')")
    @GetMapping("/parent")
    public ParentEntity getParent() {
        // 返回父实体对象
    }
    
    @PreAuthorize("hasPermission(#childEntity, 'read')")
    @GetMapping("/child")
    public ChildEntity getChild() {
        // 返回子实体对象
    }
}