From a92878b69f28c91884dd469ed2f4cce57844ff62 Mon Sep 17 00:00:00 2001
From: Francois Beausoleil <fbos@users.sourceforge.net>
Date: Mon, 22 Mar 2004 20:23:07 +0000
Subject: [PATCH] * samples/contacts/war/WEB-INF/jsp/include.jsp:   Declare
 access to the Acegi authz taglib.

* samples/contacts/war/WEB-INF/jsp/index.jsp:
  Use the Acegi authz taglib to protect access to the
  delete link for users which have the ROLE_SUPERVISOR.
---
 samples/contacts/war/WEB-INF/jsp/include.jsp | 1 +
 samples/contacts/war/WEB-INF/jsp/index.jsp   | 4 ++--
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/samples/contacts/war/WEB-INF/jsp/include.jsp b/samples/contacts/war/WEB-INF/jsp/include.jsp
index 44714b507b..4968436528 100644
--- a/samples/contacts/war/WEB-INF/jsp/include.jsp
+++ b/samples/contacts/war/WEB-INF/jsp/include.jsp
@@ -1,4 +1,5 @@
 <%@ taglib prefix="spring" uri="http://www.springframework.org/tags" %>
+<%@ taglib prefix="authz" uri="http://acegisecurity.sf.net/authz" %>
 
 <%@ taglib prefix="c" uri="http://java.sun.com/jstl/core" %>
 <%@ taglib prefix="fmt" uri="http://java.sun.com/jstl/fmt" %>
diff --git a/samples/contacts/war/WEB-INF/jsp/index.jsp b/samples/contacts/war/WEB-INF/jsp/index.jsp
index c5b8f8e95b..7cb530b855 100644
--- a/samples/contacts/war/WEB-INF/jsp/index.jsp
+++ b/samples/contacts/war/WEB-INF/jsp/index.jsp
@@ -18,9 +18,9 @@
   <td>
       <c:out value="${contact.email}"/>
   </td>
-  <c:if test="${model.supervisor == true}">
+  <authz:authorize ifAllGranted="ROLE_SUPERVISOR">
     <td><A HREF="del.htm?id=<c:out value="${contact.id}"/>">Del</A></td>
-  </c:if>
+  </authz:authorize>
   </tr>
 </c:forEach>
 </table>