如何根据 JSF 中的用户角色隐藏一些内容？

Question

I'm using JAAS and have applied security on some folders for different roles. I want to hide some navigation for different users because, although the pages are not accessible, the user can still see the links that he has no rights on? What's the simple way to achieve this in JSF? Do I need to call a method to check the role in the "rendered" property of each navigation link? Any sample code? Please help!

Answer 1

Use rendered for view, take

rendered="#{userBean.role =='ADMIN'}"

also configure filter or use Spring security's filter to restrict them to access the URL

Answer 2

正确的答案在这里，可能对其他人有帮助： “isUserInRole”方法与 JAAS 相关吗？