flex - Spring-security split authentication and the authorization -

I'm trying to create a custom login for my Flex web app with spring-protection, I have a working version Where we use channelset.login with blazards.

My problem is that I would like to split certification and authorization.

I would like

Roles authorized by the user from this role have been determined based on this option.

This means that the user should be certified and then the customer needs to call a service call and then the authorization process is required.

Does anyone know that this is possible and there are some suggestions on how this can be done? / P>

Thank you in advance,

Arjen

Yes, this It does not look too far, you can store user roles in the database, each role for new users, such as some SIGNUP, which will allow the user to signup, will be determined once his new role, just that role Update and restrict the role of being able to update the new role in it The relationship, as long as you are not an administrator.

You can also override the authentication process to do whatever you want to do:

The session object may need to be refreshed if you use ORM's Using some form.