managing users , roles , privileges

[Suresh Khant]

Hi All,

I have worked using strut for sometime and i was using the tag

<logic:equal> & <logic:notEqual>

to show and hide the links/buttons and privileges depending upon the role of the user and its privileges

for example some users have the privileges to see the 'list user management' icon link and some not.
and in the level of the page also , that is not all the users who have privileges to view the users list, can edit or delete.

is there any component similar to logic:equal in strut , or how i can i manages the users , their roles and their privileges

by the way the roles and privileges are dynamic data stored in db .

Thanking you in Advance

[Suresh Khant]

Any reply

[Wouter Oet]

You can hide elements by using the redered attribute:
<h:outputText value="#{user.email}" rendered="#{user.inRole('admin') && user.inRole('super')}" />

[Suresh Khant]

Thanks a lot Wouter Oet ....... it is exactly what I was looking for .

[Tim Holloway]

Although the Apache Tomahawk tag library has tags which have direct role support, most JSF does not, unfortunately. So the "rendered" attribute is the usual solution.

In general, however, it's better to keep complex expressions off the View and in the backing bean. So instead of :

rendered="#{user.inRole('admin') && user.inRole('super')}" 

You might want something simpler and more targeted, such as

rendered="#{user.authorizedForEditing}" 

where

public boolean isAuthorizedForEditing() {
      return inRole("admin") && inRole("super");
}