title: Spring security group based authorization
body: <p>i intend to make group based permission scheme but i am confused about the following:</p>
  
  <p>i have some questions:</p>
  
  <ol>
  <li>What is the best approach <code>User &gt; Group &gt; Roles &gt; Permissions</code> <strong>or</strong> 
  <code>User &gt; Roles &gt; Permissions</code></li>
  <li>How to implement the security (login/remember me) in this case (need a link to good tutorial).</li>
  <li>The method level security will use the annotation <code>@PreAutorize hasPermission(#, '')</code> or hasRole or what ?</li>
  <li>How will i hide components (administration for non admins) in the UI depending on the permissions (UI is JSF) ?</li>
  <li>If i hided components in the view what will be the importance of the method level security then ?</li>
  </ol>