title: why sec:authorize doesn't work?
body: <p>I have a JSF 2 page based on Facelets and use Spring Security 3 behind the application. When I put some tags like this within my page:</p>
  
  <pre><code>&lt;sec:authorize  access="hasRole('SS')" &gt;
  &lt;h:outputText value="X" /&gt;&lt;/sec:authorize&gt;
  </code></pre>
  
  <p>the X will display at runtime anyway. The auto completion feature of eclipse work correctly to show the "sec:" tags and their properties at programming time. what's the problem?</p>