Hi guys, I have found solution myself and I share here the solution.
Patient model is related many-to-many with appfuse.User , so adding ROLE_USER here (security.xml): .. <bean id="methodSecurityInterceptor" class="org.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor"> <property name="authenticationManager" ref="authenticationManager"/> <property name="accessDecisionManager" ref="accessDecisionManager"/> <property name="objectDefinitionSource"> <value> org.appfuse.service.UserManager.getUsers=ROLE_ADMIN,ROLE_USER org.appfuse.service.UserManager.removeUser=ROLE_ADMIN </value> </property> </bean> ... Get things working. Thanks for the help !! Stefano -- View this message in context: http://www.nabble.com/Security-configuration-tf4849572s2369.html#a13878060 Sent from the AppFuse - User mailing list archive at Nabble.com. --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]