Assuming you are using Restful URL’s in that the URL identified a particular resource which users have/haven’t got access to I would look into Spring Security and in particular the Spring ACL framework.

This allows use to restrict access based upon the item being accessed. For example you might have a system where users belong to accounts and you wish that they can only access URL’s for their accounts. Spring ACL would be able to address this.

James

In that case you could simply write to the response stream and set the response type like so:

@RequestMapping(method=RequestMethod.GET)
public void myControllerMethod( HttpServletResponse response) {
PrintWriter out = response.getWriter();
out.println(yourXMLHere);
response.setContentType("application/xml");
out.close();
}

The HttpServletResponse object is another parameter Spring request mapped methods can use within their signature.

Would that help?

Eggsy

Is your requirement to Post/Put XML to a Spring controller?

If so Spring providers Message converters:

Message Conversion

Eggsy