Nicklas, in the case of hiding a component, have you tried
setting the disabled or rendered attributes with EL? try
something like :
rendered="#{UserPermissionsBean.hasSomeAccessRight}"
Yes, that is an alternative but I would prefer to have it in a completely separate layer if at all possible.
It would allow for customization just by adding a row in the database instead of poking around in the
JSP.
