So I gather from the Roo Shell on 1.2.1 that security setup is enabled after "web jsf setup" and "web jsf all" but its a head fake as "security setup" as it yields ...spring/webmvc-config.xml' does not exist

Since JSF is its on MVC and doesn't use Spring webmvc THAT the Spring Security is not available to Roo with web jsf. It that's true please just let us know so we won't bang our heads any more.

If you have an alternative in mind please let us know that too.