I'm kinda ok with that too. Spring tries to provide that kind of feature. For my present work I can't use it. Rights are document based. Authentication isn't ev

I'm kinda ok with that too. Spring tries to provide that kind of feature. For my present work I can't use it. Rights are document based. Authentication isn't even possible because any given doc could actually be allowed to the public or tightened down to a specific group or groups. So here I am leaving a huge piece of the web framework on the table.