why sec:authorize doesn't work?

[nazila]

I have a JSF 2 page based on Facelets and use Spring Security 3.0.5 behind the application. When I put some tags like this within my page:

<sec:authorize  access="hasRole('SS')" >
<h:outputText value="X" />
</sec:authorize>

the X will display at runtime anyway with any role. The auto completion feature of my eclipse work correctly to show the "sec:" tags and their properties at programming time. what's the problem?

[Rob Winch]

What does the html rendered by this page look like?

[nazila]

What does the html rendered by this page look like?

The source of page is like this:

<sec:authorize access="hasRole('SS')">X</sec:authorize>

[Rob Winch]

This means that you do not have the jsp tags setup correctly. One of the easiest things to check is to ensure that spring-security-taglibs-<version>.jar is in your WEB-INF/lib/.

[nazila]

This means that you do not have the jsp tags setup correctly. One of the easiest things to check is to ensure that spring-security-taglibs-<version>.jar is in your WEB-INF/lib/.

This is the jar file that is in my WEB-INF/lib/:
http://search.maven.org/remoteconten....5.RELEASE.jar