如何在jsf中创建多个用户以及如何在java-ee中授予不同用户访问权限

Question

@WebFilter(filterName = "AuthFilter", urlPatterns = {"*.xhtml"})
public class AuthorizationFilter implements Filter {

    public AuthorizationFilter() {

    }

    @Override
    public void init(FilterConfig filterConfig) throws ServletException {

    }

    @Override

    public void doFilter(ServletRequest req, ServletResponse resp,
            FilterChain chain) throws IOException, ServletException {

        HttpServletRequest request = (HttpServletRequest) req;
        HttpServletResponse response = (HttpServletResponse) resp;
        HttpSession session = request.getSession(false);

        String loginURI = request.getContextPath() + "/index.xhtml";

        boolean loggedIn = session != null && session.getAttribute("user") != null;
        boolean loginRequest = request.getRequestURI().equals(loginURI);
        boolean resourceRequest = request.getRequestURI().startsWith(request.getContextPath() + ResourceHandler.RESOURCE_IDENTIFIER);

        String userType = ((Users) session.getAttribute("user")).getUserType();
        System.out.println("User Type in filter  class : " + userType);

        if (loggedIn || loginRequest || resourceRequest) {

            chain.doFilter(request, response);

        } else {
            response.sendRedirect(loginURI);
        }
}

我创建了用于登录的过滤器。现在，我有三个不同的用户。我想授予这些用户访问权限。我该怎么做？