java - ACL in spring security or permision configuration -

my requirement following: have application uses roles lets said (admin/user/guest), depending on role can access different sections on application. in specific section, of them can see actions/options/buttons/tabs, means 2 admin users, configuration of screen , available option different.

i reading domainacl in spring security , spring-security permissions, believe use domainacl not need cover requirement don't need have object granular security.

my question there specific out-of-the box feature of spring-security can solve requirement don't know, taking in consideration need add java tags in jsp remove buttons/controls ui. other question : permissions without domainacl enough solve requirement or missing something.

basically need save actions can executed users + role of users, lets said want store in database permissions "execute search", "view_user_tab".

• admin / peter / "execute search", "view_user_tab"
• admin / sarah / "execute search"
• user / john / "view_user_tab"

i'm using spring-security3.2 , jsp pages view technology.

i did roles , operation in application. @ answer, helped me: difference between role , grantedauthority in spring security

basically article said there no difference between roles , permissions both granted authorities , need placed in top of security context able manage access different resources. use hasrole or haspermission specify more readable developer, both operates analyzing granted authorities domain.