Security at root_menu issue

Question

Hi Guys,
I'm using jdev 11.1.1.6 and kinda new to adf and currently having issue when adding security by role to render the menu (root_menu).
I have 2 roles set already: FinanceManagers and RegistryManagers, and I have 2 pages Finance and Registration with menu set on the root_menu.
I set the rendered attribute on itemNode_Registration to : #{securityContext.userInRole['RegistryManagers']} and itemNode_Finance to : #{securityContext.userInRole['FinanceManagers']}
But oddly, Finance manager user still able to see the Registration menu item or vice versa.
I see that if I forcefully set the rendered to false, then it correctly set to not rendered.
I thought probably I didn't set the EL correctly, but I tested the EL on navigation pane (command navigation item) and it gives the right behaviour to render / not render all of navigation item using EL.
So my assumption so far is that my EL is correct and the rendered attribute at root_menu itemnode also working fine.
But I'm confused now as it seems the #{securityContext.userInRole['roleitem']} didn't seem to be correctly evaluated at menu_root level (i'm pretty sure i'm wrong about this or probably miss some configuration).
Is there anyway that I can check this #{securityContext.userInRole['RegistryManager']} output at runtime? i.e output to logfile?
Is my setting / approach is correct? I followed all these references
http://docs.oracle.com/cd/E29049_01/web.1112/e16182/adding_security.htm
http://docs.oracle.com/cd/E29505_01/fusionapps.1111/e15524/ui_impl_uishell.htm#CHDIHAGA
and seems everything pretty straightforward.
Thanks in advanced,
ds

Answer 1

That's a good idea Timo, but since i'm at root_menu, there's no outputText i can use, so i put it into itemNode label like this:
<menu xmlns="http://myfaces.apache.org/trinidad/menu">
<itemNode id="itemNode_Home" label="Home" action="adfMenu_Home"
focusViewId="/Home"/>
<itemNode id="itemNode_Finance" label="#{securityContext.userInRole['FinanceManagers']}" action="adfMenu_Finance"
focusViewId="/Finance"
rendered="#{securityContext.userInRole['FinanceManagers']}"/>
and here's how i set the navigation:
<af:panelGroupLayout id="panelGroupLayout1" layout="vertical">
<af:tree id="menuTree" value="#{root_menu}" var="menu"
visible="true">
<f:facet name="nodeStamp">
<af:commandLink text="#{menu.label}" id="pt_cl1"
action="#{menu.doAction}"/>
</f:facet>
</af:tree>
<af:separator id="pt_s1"/>
<af:goLink id="pt_gl1" text="BPM Tasks" targetFrame="_blank"
destination="<edited>"
inlineStyle="margin-left:17px;"/>
</af:panelGroupLayout>
And I can see it rendered the correct "value" as false when login with FinanceManager user, but it's not suppose to render the menu item.
So that means root_menu able to evaluate the EL but how come the rendered attribute can't?
Is there any other config that I need to set? Or is the rendered attribute is not suppose to accept EL (which i don't think, as there EL builder on it)?
Or should I set security (hide/show) for navigation item by security role differently? is there any other way?
Kind regards,
ds