I'm trying to make a simple forum just to get the hang of the Spring Security and MVC frameworks.

For simplicity's sake, let's I have a JSP to view a forum post, which looks like the following:

```
<body>
    ...

    Title: ${forumPost.title} <br>
    Author: ${forumPost.author.name} <br>
    Message: {forumPost.message} <br>

    <security:authorize ifAnyGranted="ROLE_ADMIN">
        Edit: <a href="/edit">Edit</a>
    </security:authorize>

    ...
</body>

```

My problem is: not only should an Administrator be able to edit this post, but the original author should be able to as well. Therefore, I only want ROLE\_ADMIN and the original author to be able to see the Edit link. However I'm not sure how to filter by user with the *security:authorize* tag, or if I'll need to go about this a different way.

Any suggestions would be much appreciated. Thanks!