title: Suggestions to implement Role based authorization for an existing application in Flex
body: <p>I have an application that is coded using Flex 3 on UI side and java @ the service layer, along with BlazeDS. Now we need to authorize the users accessing the system based on the roles that are defined for them in the database, eg : say a user with role guest should not be able to access Admin tab on ui and also should not be able to do any operations other than viewing the data displayed on dashboard.Also the point to note here is that roles can be created dynamically by Super users from UI.</p>
  
  <p>I came across this link which describes how to perform <a href="http://www.joshuaostrom.com/2010/04/30/blazeds-custom-authentication/" rel="nofollow">Role Based Authentication &amp; Authorization</a></p>
  
  <p>With this approach i need to define the roles in service-config.xml but since my roles are not pre-defined i cannot go with this.</p>
  
  <p>Has anybody encountered a similar situation. Any pointers will be of great help.</p>