Fundamentally they're the same. SecurityInterceptor treats the @Restrict in exactly the same way, no matter whether it's specified on the method or the class.