Dr. Sun,

Inisde out JSP files I hide, for instance, the link to create a new blog entry if the user is not the owner of the blog. This requires me to actually write some security code inside a controller, since I have to match usernames. Is this ok or do I need to do it in some other manner?

Thank you!!