I am currently reading Dan Allen's MEAP Seam in Action book (pretty decent book, BTW) and stumbled upon the Identity.checkRole() method.  This method has been in the Seam Identity API since 1.2.1.GA or before.

I did not see this in the Seam 2.0.0.GA ref doc or in the Yuan book.  Is it not used as much as hasRole()?

If we are primarily interested in securing JSF views (all or nothing access, no component level restrictions) what is the best design/implementation with page level security and also throwing an AuthorizationException if not a member (hasRole() does not throw any exceptions, checkRole() may throw AuthorizationException)?  I would like to keep all security/restriction configuration in the pages.xml if possible.

If it's not possible to do that, is it possible to use hasRole() in pages.xml and redirect to home.xhtml (or error.xhtml) and add message to FacesMessage from pages.xml?

are there any situations where one would use both hasRole() and checkRole() in this case?