some nice examble

code/LanBortalWeb/WebContent/resources/tools/user/list.xhtml

@@ -17,59 +17,70 @@
     <composite:implementation>
 
 
-
         <h:form>
-		<h:dataTable border="1" id="user" value="#{userView.users}" var="user">
-				<h:column>
-					<f:facet name="header">
-						<h:outputText value="Id" />
-					</f:facet>
-					<h:outputText value="#{user.id}" />
-				</h:column>
-				<h:column>
-					<f:facet name="header">
-						<h:outputText value="Real name" />
-					</f:facet>
-					<h:outputText value="#{user.firstnames}" />
-				</h:column>
-				<h:column>
-					<f:facet name="header">
-						<h:outputText value="Address" />
-					</f:facet>
-					<h:outputText value="#{user.address}" />
-				</h:column>
-				<h:column>
-					<f:facet name="header">
-						<h:outputText value="Town" />
-					</f:facet>
-					<h:outputText value="#{user.town}" />
-				</h:column>
-				<h:column>
-					<f:facet name="header">
-						<h:outputText value="Zip" />
-					</f:facet>
-					<h:outputText value="#{user.zip}" />
-				</h:column>
-				<h:column>
-					<f:facet name="header">
-						<h:outputText value="Phone number" />
-					</f:facet>
-					<h:outputText value="#{user.phone}" />
-				</h:column>
-				<h:column>
-					<f:facet name="header">
-						<h:outputText value="Sex" />
-					</f:facet>
-					<h:outputText value="#{user.female}" />
-				</h:column>
-				<h:column>
-					<f:facet name="header">
-						<h:outputText value="Edit" />
-					</f:facet>
-					<h:commandButton action="#{userView.edit()}" value="Edit" />
-				</h:column>
-			</h:dataTable>
-		</h:form>
+            <c:choose>
+                <c:when test='#{sessionHandler.hasPermission("userList", "read") }' >
+                    <h:dataTable border="1" id="user" value="#{userView.users}" var="user">
+                        <h:column>
+                            <f:facet name="header">
+                                <h:outputText value="Id" />
+                            </f:facet>
+                            <h:outputText value="#{user.id}" />
+                        </h:column>
+                        <h:column>
+                            <f:facet name="header">
+                                <h:outputText value="Real name" />
+                            </f:facet>
+                            <h:outputText value="#{user.firstnames}" />
+                        </h:column>
+                        <h:column>
+                            <f:facet name="header">
+                                <h:outputText value="Address" />
+                            </f:facet>
+                            <h:outputText value="#{user.address}" />
+                        </h:column>
+                        <h:column>
+                            <f:facet name="header">
+                                <h:outputText value="Town" />
+                            </f:facet>
+                            <h:outputText value="#{user.town}" />
+                        </h:column>
+                        <h:column>
+                            <f:facet name="header">
+                                <h:outputText value="Zip" />
+                            </f:facet>
+                            <h:outputText value="#{user.zip}" />
+                        </h:column>
+                        <h:column>
+                            <f:facet name="header">
+                                <h:outputText value="Phone number" />
+                            </f:facet>
+                            <h:outputText value="#{user.phone}" />
+                        </h:column>
+                        <h:column>
+                            <f:facet name="header">
+                                <h:outputText value="Sex" />
+                            </f:facet>
+                            <h:outputText value="#{user.female}" />
+                        </h:column>
+                        <h:column>
+                            <f:facet name="header">
+                                <h:outputText value="Edit" />
+                            </f:facet>
+                            <h:commandButton action="#{userView.edit()}" value="Edit" />
+                        </h:column>
+                    </h:dataTable>
+
+
+
+                </c:when>
+                <c:otherwise>
+                    TODO: some nice message to user.
+                </c:otherwise>
+            </c:choose>
+
+        </h:form>
+
 
 
 

code/LanBortalWeb/src/fi/insomnia/bortal/handler/SessionHandler.java

@@ -18,7 +18,7 @@ import fi.insomnia.bortal.model.User;
  * 
  * @author tuukka
  */
-@ManagedBean(name = "SessionHandler")
+@ManagedBean(name = "sessionHandler")
 @SessionScoped
 public class SessionHandler {
 
@@ -43,8 +43,8 @@ public class SessionHandler {
     }
 
     public boolean hasPermission(String target, RolePermission permission) {
-
-        return handlerbean.hasPermission(target, getUser(), permission);
+        return false;
+        //return handlerbean.hasPermission(target, getUser(), permission);
 
     }