3 Replies Latest reply on Dec 19, 2011 4:55 AM by kelly goedert

    Seam security applying role restrictions

    kelly goedert Apprentice


      I am creating an application using seam 3 and cdi. I started with an example, for the security part like this:

      public @ConversationScoped class UserAction {
        public @Admin void deleteUser(String userId) {
          // code

      It works. If my user has the admin role, then he has access. But how can I implement a situation where the user may have one rule or the other? For example: if my user is @Admin or @Student he can access this, but if he is a @Teacher he cannot.