title: How do I do security in JSF?
body: <p>I am using Java EE 6 with all reference implementations. Having made some security constraints for some pages such as everything beneath <code>/secure/*</code>. This is rough grained security. What if two users both have the same roles, but some content of the same page should only be visible to user "John" for example? Or a totally different page should be shown to "John"? I have many questions un-answered around this so it would be nice if somebody could provide some links/explanations or books that cover this as well. I need more fine grained security control.</p>