DeltaSpike Security API : what I want to write

deltaspike-security-whatiwant

// Inside a JSF page :
<h:commandButton action="create" rendered="#{identity.can('create','user')}">Create User</h:commandButton>

// Inside Java code :
// (would be better with annotations of course)

public class UserAction
{
    @Inject
    private Identity identity;

    public String persist(User user)
    {
        if(identity.can('create','user')
        {
            return doPersist(user);
        }
        else
        {
            throw new SecurityViolation();
        }
    }

    private String doPersist(User user)
    {
        // persist the user in database
    }
}