如何限制某些用户使用PUT with Spring Data Rest编辑对象的所有属性？

@Configuration
@EnableGlobalMethodSecurity(prePostEnabled = true)
public class SecurityConfig extends GlobalMethodSecurityConfiguration {

    @Autowired
    private CustomPermissionEvaluator permissionEvaluator;

    @Override
    protected MethodSecurityExpressionHandler createExpressionHandler() {
        DefaultMethodSecurityExpressionHandler expressionHandler = new DefaultMethodSecurityExpressionHandler();
        expressionHandler.setPermissionEvaluator(permissionEvaluator);
        return expressionHandler;
    }
}

@Component
public class CustomPermissionEvaluator implements PermissionEvaluator {

    @Override
    public boolean hasPermission(Authentication authentication, Object targetDomainObject, Object permission) {
        // 根据authentication获取当前用户信息，判断是否有权限进行PUT操作
        // 可以根据targetDomainObject判断要编辑的对象属性
        // 返回true表示有权限，返回false表示无权限
    }

    @Override
    public boolean hasPermission(Authentication authentication, Serializable targetId, String targetType, Object permission) {
        throw new UnsupportedOperationException();
    }
}

@Entity
@PreAuthorize("hasPermission(#entity, 'PUT')")
public class YourEntity {
    // 实体类定义
}