* samples/contacts/war/WEB-INF/jsp/include.jsp:

  Declare access to the Acegi authz taglib.

* samples/contacts/war/WEB-INF/jsp/index.jsp:
  Use the Acegi authz taglib to protect access to the
  delete link for users which have the ROLE_SUPERVISOR.

samples/contacts/war/WEB-INF/jsp/include.jsp

@@ -1,4 +1,5 @@
 <%@ taglib prefix="spring" uri="http://www.springframework.org/tags" %>
+<%@ taglib prefix="authz" uri="http://acegisecurity.sf.net/authz" %>
 
 <%@ taglib prefix="c" uri="http://java.sun.com/jstl/core" %>
 <%@ taglib prefix="fmt" uri="http://java.sun.com/jstl/fmt" %>

samples/contacts/war/WEB-INF/jsp/index.jsp

@@ -18,9 +18,9 @@
   <td>
       <c:out value="${contact.email}"/>
   </td>
-  <c:if test="${model.supervisor == true}">
+  <authz:authorize ifAllGranted="ROLE_SUPERVISOR">
     <td><A HREF="del.htm?id=<c:out value="${contact.id}"/>">Del</A></td>
-  </c:if>
+  </authz:authorize>
   </tr>
 </c:forEach>
 </table>