Spring Security - Third Edition

Page-level authorization

Page-level authorization refers to the availability of application features based on the context of a particular user's request. Unlike coarse-grained authorization that we explored in Chapter 2, Getting Started with Spring Security, fine-grained authorization typically refers to the selective availability of the portions of a page, rather than restricting access to a page entirely. Most real-world applications will spend a considerable amount of time on the details of fine-grained authorization planning.

Spring Security provides us with the following three methods of selective display functionality:

• Spring Security JSP tag libraries allow conditional access declarations to be placed within a page declaration itself, ...