我在控制器中有下一个方法：

@GetMapping("/delete")
    public String deleteUser(int id) {
        groupService.deleteById(id);
        return REDIRECT_PAGE;
    }

它与下一个ui完美结合：

<a th:href="@{/groups/delete/(id=${group.id})}" class="btn btn-danger">Delete</a>

带引导模式部件：

<div th:fragment="deleteEntry">
    <div class="modal" tabindex="-1" role="dialog" id="deleteModal">
        <div class="modal-dialog" role="document">
            <div class="modal-content">
                <div class="modal-header">
                    <h5 class="modal-title">Confirm deletion</h5>
                    <button type="button" class="close" data-dismiss="modal" aria-label="Close">
                        <span aria-hidden="true">&times;</span>
                    </button>
                </div>
                <div class="modal-body">
                    <p>Are you sure you want to delete this record?</p>
                </div>
                <div class="modal-footer">
                    <button type="button" class="btn btn-secondary" data-dismiss="modal">Close</button>
                    <a href="" class="btn btn-primary" id="delRef">Yes, delete</a>
                </div>
            </div>
        </div>
    </div>
</div>

和js：

$('document').ready(function() {
    $('.table .btn-danger').on('click',function(event) {
        event.preventDefault();
        var href = $(this).attr('href');
        $('#deleteModal #delRef').attr('href', href);
        $('#deleteModal').modal();
    });
});

但是现在我想用controller中的@deletemapping更改@getmapping（开始学习Spring Security ），以及我所拥有的-

Resolved [org.springframework.web.HttpRequestMethodNotSupportedException: Request method 'GET' not supported]

我需要修什么？提前谢谢。
upd：好吧，如果不可能的话，如何添加到springsecurity配置规则，只允许“admin”删除？我尝试下一个，但不起作用-“用户”可以删除条目：

@Override
    protected void configure(HttpSecurity http) throws Exception {
        http.csrf().disable()
        .authorizeRequests()
        .antMatchers(HttpMethod.GET, "/**").hasAnyRole(Role.ADMIN.name(), Role.USER.name())
        .antMatchers(HttpMethod.GET, "/groups/delete/*").hasRole(Role.ADMIN.name())
        .antMatchers(HttpMethod.GET, "/groups/delete/").hasRole(Role.ADMIN.name())
        .antMatchers(HttpMethod.GET, "/groups/delete").hasRole(Role.ADMIN.name())
                .antMatchers(HttpMethod.POST, "/**").hasRole(Role.ADMIN.name())
                .antMatchers(HttpMethod.PUT, "/**").hasRole(Role.ADMIN.name())
                .antMatchers(HttpMethod.DELETE, "/**").hasRole(Role.ADMIN.name())
                .anyRequest().authenticated().and()
                .httpBasic();
    }