9.3. Securing view-level elements

To support security in the view layer, Spring Security comes with a JSP tag library.^[2] This tag library is small and includes only three tags, as listed in table 9.3.

^[2] If you prefer Velocity over JSP for rendering views, Spring Security also comes with a set of Velocity macros that are similar to its JSP tags.

Table 9.3. Spring Security supports security in the view layer with a JSP tag library.

JSP tag	What it does
<security:accesscontrollist>	Allows the body of the tag to be rendered if the currently authenticated user has one of the stipulated permissions in the specified domain object
<security:authentication>	Accesses properties of the current user’s authentication object
<security:authorize>	Allows the body of the tag to be rendered if a specified security constraint has been met