[Calendar for CSNS]

Continue to work on CSNS Calendar and implement the following functionality.

1. Security (30pt)

Use the tools provided by Spring Security, i.e. URL security, access decision voters, security tag library and so on, to implement access control for events. In particular:

• Public events can be viewed by any user (including anonymous user), but can only be created or modified by administrators (i.e. users with ROLE_ADMIN).
• Section events can only be viewed by the students and the instructors of the section; only the instructors can create or modify section events for that section.
• Private events can only be viewed or modified by the creator of the event.

Describe all the security measures you have implemented in a text file hw7.txt and submit it together with the project zip file.

2. Extra Credit (up to +40pt)

Good user interface design will receive up to 40pt extra credit.

[About Submission and Grading]

Before submitting your work, commit all the changes to your Subversion repository and create a tag.

If you use any libraries that are not in the original CSNS and are not included in your csns.zip, please upload the library jar files together with csns.zip when you submit your work.

To test your project, we will use the following SQL scripts in your csns.zip to create, populate, and then clear the database:

• db/csns-create.sql
• db/csns-test-insert.sql
• db/csns-drop.sql

Please make sure that these scripts are up to date and can be run in their entirety without generating any errors.