Spring Boot #PreAuthorize at class level - spring-boot

Question

I have a Spring Boot controller. My controller is derived from a base class. If I annotate a method in the base class or the base class itself with:
#RequestMapping(value = "/page", method = RequestMethod.POST)
#PreAuthorize("hasRole('BACKOFFICE')")
public ResponseEntity<?> page(#RequestBody ObjectNode json, Pageable pageable, Authentication authentication) throws ApplicationException{
...
}
#RestController
#PreAuthorize("hasRole('BACKOFFICE')")
public abstract class TableController {
...
}
it works and roles are checked. I need to annotate the derived class but there #PreAuthorized annotation is ignored.
#RestController
#PreAuthorize("hasRole('BACKOFFICE')")
public class UtentiController extends TableController{
...
}
Is there a different annotation or a cofinguration required?
My security configuration is
#Configuration
#EnableWebSecurity
#EnableTransactionManagement
#EnableGlobalMethodSecurity(prePostEnabled = true, securedEnabled = true)
public class SecurityConfiguration extends WebSecurityConfigurerAdapter {
#Autowired
private UserDetailServiceImpl userService;
#Autowired
public void configureGlobal(AuthenticationManagerBuilder auth) throws Exception{
auth.userDetailsService(userService);
}
#Override
protected void configure(HttpSecurity http) throws Exception {
http
.authorizeRequests()
.antMatchers( "/css/**", "/libs/**","/js/**", "/api/**", "/assets/**", "/register", "/public/**").permitAll()
.anyRequest().authenticated()
.and()
.formLogin()
.loginPage("/login")
.permitAll()
.and()
.logout()
.logoutSuccessUrl("/login?logout")
.permitAll()
.and()
.csrf().disable();
}
}