How do you handle security with JSF web application?
For example, you have one admin and few users.
How do you protect some pages and how do you show/hide links for different roles (admin, user) in navigation.jsf?
And for example, if I have in HttpSession attr TYPE=admin what to put in jsf page to check for TYPE and if TYPE is wrong to redirect to login.jsp?

