Hide screen options if user does not have permission

Question

I’m having a hard time in a web application I’m creating here, I’m using spring security to control access, session and login, with backend java with restful and frontend with primefaces. I wonder if I like you conceal the options the user is not allowed to access.

Currently I intercept the url and if you do not have permission I call another screen that warns this impediment asking it to return to the home. I wish those options didn’t appear to him.

Answer 1

You can use namespace facelets security Spring to conditionally render JSF components (including Primefaces), as authorized by the current user.

The namespace is http://www.springframework.org/security/tags. Let’s say he’s mapped to sec, an example of code would be this:

<sec:authorize ifAllGranted="USUARIO_BACANA">
    declare aqui os componentes para o usuário bacana.
</sec:authorize>

More information: http://keylesson.com/index.php/2015/06/18/spring-security-authorize-tag-example-1993/

Answer 2

I got the solution, thanks to all who helped and guided me the solution

https://stackoverflow.com/questions/7915134/how-to-use-the-spring-security-facelets-tag-library-in-jsf

Following the solution of this user all right