[BVVO]

This assignment builds on top of your work in the previous assignments, so make sure that all the functions from the previous assignments work properly; otherwise you will not receive any credit.

Continue your work in Homework 5 and implement the following features in BVVO.

1. (20pt) Allow users to edit their own reviews.

2. (20pt) Allow administrators to delete reviews. Note that deleting a review does not necessarily mean removing it from the database - you could simply flag the review as deleted so it will not show up in search or display.

2. (40pt) Use Spring Security to implement the following security measures:

• Login and logout.
• Only authenticated regular users (i.e. non-lawyer) can create reviews.
• Authenticated regular users can only edit their own reviews.
• Only administrators can delete reviews.
• The user interface should hide operations (e.g. create, edit, or delete reviews) from the users who do not have the privilege to perform those operations.

For this exercise, please describe all the security measures you have implemented and how you implemented them in a text file hw6.txt, and submit the file together with the project zip file.

[About Submission and Grading]

Before submitting your work, commit all the changes to your Subversion repository and create a tag.

To test your project, we will use the following SQL scripts in your zip file to create, populate, and then clear the database:

• src/main/scripts/bvvo-create.sql
• src/main/scripts/bvvo-drop.sql

Please make sure that these scripts are up to date and can be run in their entirety without any errors.