Can I Do This In Grails 2: Secure Individual Tabs with Spring Security

Question

If I create tabs using one of the Grails GUI options (which one should I use), is it possible to turn tabs on and off, based on the current user? For example only users with a role of admin should see the Manage Users tab. And even anonymous users should see the Main Content tab.

Ideally, I'd like to use Spring Security ACL.

Answer 1

Yes, it's possible and pretty easy with the Acegi (Spring Security Plugin), see this section of the docs. You'll need to define some roles, and then describe how those roles apply to different URLS. Example (from link above):

/admin/=ROLE_USER /book/test/=IS_AUTHENTICATED_FULLY /book/**=ROLE_SUPERVISOR

There is also explanation about exactly how to do this in Grails In Action book.