showing "add owner" button only to admin (it is done by using url access

control -easier than with roles-)

src/main/java/org/springframework/samples/petclinic/configuration/SecurityConfiguration.java

@@ -36,6 +36,7 @@ protected void configure(HttpSecurity http) throws Exception {
 				.antMatchers("/resources/**","/webjars/**","/h2-console/**").permitAll()
 				.antMatchers(HttpMethod.GET, "/","/oups").permitAll()
 				.antMatchers("/users/new").permitAll()
+				.antMatchers("/admin/**").hasAnyAuthority("admin")
 				.antMatchers("/owners/**").hasAnyAuthority("owner","admin")				
 				.antMatchers("/vets/**").authenticated()
 				.anyRequest().denyAll()

src/main/webapp/WEB-INF/jsp/owners/findOwners.jsp

@@ -1,34 +1,40 @@
-<%@ page session="false" trimDirectiveWhitespaces="true" %>
-<%@ taglib prefix="spring" uri="http://www.springframework.org/tags" %>
-<%@ taglib prefix="fmt" uri="http://java.sun.com/jsp/jstl/fmt" %>
-<%@ taglib prefix="form" uri="http://www.springframework.org/tags/form" %>
-<%@ taglib prefix="fn" uri="http://java.sun.com/jsp/jstl/functions" %>
-<%@ taglib prefix="petclinic" tagdir="/WEB-INF/tags" %>
-
-<petclinic:layout pageName="owners">
-
-    <h2>Find Owners</h2>
-
-
-    <form:form modelAttribute="owner" action="/owners" method="get" class="form-horizontal"
-               id="search-owner-form">
-        <div class="form-group">
-            <div class="control-group" id="lastName">
-                <label class="col-sm-2 control-label">Last name </label>
-                <div class="col-sm-10">
-                    <form:input class="form-control" path="lastName" size="30" maxlength="80"/>
-                    <span class="help-inline"><form:errors path="*"/></span>
-                </div>
-            </div>
-        </div>
-        <div class="form-group">
-            <div class="col-sm-offset-2 col-sm-10">
-                <button type="submit" class="btn btn-default">Find Owner</button>
-            </div>
-        </div>
-
-    </form:form>
-
-    <br/>
-    <a class="btn btn-default" href='<spring:url value="/owners/new" htmlEscape="true"/>'>Add Owner</a>
-</petclinic:layout>
+<%@ page session="false" trimDirectiveWhitespaces="true" %>
+<%@ taglib prefix="spring" uri="http://www.springframework.org/tags" %>
+<%@ taglib prefix="fmt" uri="http://java.sun.com/jsp/jstl/fmt" %>
+<%@ taglib prefix="form" uri="http://www.springframework.org/tags/form" %>
+<%@ taglib prefix="fn" uri="http://java.sun.com/jsp/jstl/functions" %>
+<%@ taglib prefix="petclinic" tagdir="/WEB-INF/tags" %>
+<%@ taglib prefix="sec"
+	uri="http://www.springframework.org/security/tags"%>
+<!--  >%@ taglib prefix="sec" uri="http://www.springframework.org/security/tags"%-->
+
+<petclinic:layout pageName="owners">
+
+    <h2>Find Owners</h2>
+
+
+    <form:form modelAttribute="owner" action="/owners" method="get" class="form-horizontal"
+               id="search-owner-form">
+        <div class="form-group">
+            <div class="control-group" id="lastName">
+                <label class="col-sm-2 control-label">Last name </label>
+                <div class="col-sm-10">
+                    <form:input class="form-control" path="lastName" size="30" maxlength="80"/>
+                    <span class="help-inline"><form:errors path="*"/></span>
+                </div>
+            </div>
+        </div>
+        <div class="form-group">
+            <div class="col-sm-offset-2 col-sm-10">
+                <button type="submit" class="btn btn-default">Find Owner</button>
+            </div>
+        </div>
+
+    </form:form>
+
+    <br/> 
+    <sec:authorize url="/admin">
+		<a class="btn btn-default" href='<spring:url value="/owners/new" htmlEscape="true"/>'>Add Owner</a>
+	</sec:authorize>
+
+</petclinic:layout>