Components visibility depending on permission

Question

Hi all,
WebCenter Spaces (and Composer in custom apps as well)
currently using WebCenter 11gPS1
What I want to achieve: components that are added to a Space/page at run time are visible only for users/Space members with a certain role/permission.
I am thinking about setting the Component visibility using an EL Expression. I am looking for the EL expression to use that refers to permissions of the current user. I have found #{securityContext.userName} . Now I try to find some expression that allows me to test whether a user has a permission (something like #{securityContext.hasPermission['some permission']}).
Does anyone know how I can use EL to test for the current user's permission(s)?
Or alternatively: does anyone know another way to define access to components - such as images, rich text blocks and custom task flows or portlets - based on permissions?
thanks.
Lucas

Answer 1

In order to make use of WebCenter Spaces classes such as Space, SpaceContext and WCSecurityManager, I had to add the WebCenter Spaces Client library to project. To ensure the compilation from the Ant script succeeds, I also have to add the required Jar files to the internal-targets.xml file (or at least that was a way to get it work):
<path id="library.WebCenter.Spaces.Client">
      <pathelement location="${jdeveloper.install.home.directory}/jdeveloper/webcenter/modules/oracle.webcenter.framework_11.1.1/webcenter-core-api.jar"/>
      <pathelement location="${jdeveloper.install.home.directory}/jdeveloper/webcenter/modules/oracle.webcenter.framework_11.1.1/spaces-api.jar"/>
      <pathelement location="${jdeveloper.install.home.directory}/jdeveloper/webcenter/modules/oracle.webcenter.framework_11.1.1/spaces-webservice-client.jar"/>
   </path>
  <path id="classpath">
     <path refid="library.ADF.Common.Runtime"/>
     <path refid="library.WebCenter.Spaces.Client"/>
   </path>Note: my colleague Aino Andriessen takes all the credits here.
This allowed us to deploy and run a bean with code like this:
    public String getText() {
        String text = "start:";
        Space space = SpacesContext.getCurrentInstance().getCurrentSpace();
        WCSecurityManager secMgr;
        text = text + "members";
        try {
            secMgr = space.getSecurityManager();
            List<MemberInfo> m = secMgr.getMemberInfo();
            for (MemberInfo minf : m) {
                text = text + ";" + minf.getName();
                text = text + "roles:";
                List<oracle.webcenter.webcenterapp.security.RoleInfo> roles =
                    minf.getRoles();
                for (RoleInfo rinf : roles) {
                    text = text + "-" + rinf.getName() + "|" + rinf.getPolicyRoleName() + "/";
        } catch (SpacesException e) {
        } catch (WCSecurityException e) {
        return text;
    }