title: Group and acl on Spring Security
body: <p>I want to use Spring Security to manage user, group and permissions.</p>
  
  <p>I want to use ACL to secure my domain objects but I can't find a way to assign a group to an acl.</p>
  
  <p>For example:
  I've got users and groups. Each group can have the following securities:
  - manage forums (can be a role like <code>ROLE_FORUM_MANAGER</code>)
  - edit a specific forum (acl on the specific forum).</p>
  
  <p>Moreover, Groups are defined by users which have role <code>ROLE_PERMISSION_MANAGER</code>. BUT all groups defined by this user can only be edited and managed by this user. So group are attached to a user. Exactly, imagine that user creates a google group: this user can manage right permission groups only for the group he has created. And so he can create group to manage specific forum of its own google group.</p>
  
  <p>How can I do it?</p>
  
  <p>I read the spring security docs and the following tutorials (so please don't send me to these links):
  <a href="http://grzegorzborkowski.blogspot.com/2008/10/spring-security-acl-very-basic-tutorial.html" rel="nofollow noreferrer">http://grzegorzborkowski.blogspot.com/2008/10/spring-security-acl-very-basic-tutorial.html</a>
   <a href="http://blog.denksoft.com/?page_id=20" rel="nofollow noreferrer">http://blog.denksoft.com/?page_id=20</a></p>