title: Integrate RBAC in Spring security
body: <p>I config Spring Security in my web application by this example: <a href="http://www.baeldung.com/role-and-privilege-for-spring-security-registration" rel="nofollow noreferrer">http://www.baeldung.com/role-and-privilege-for-spring-security-registration</a>
  and this
  <a href="http://www.baeldung.com/spring-security-create-new-custom-security-expression" rel="nofollow noreferrer">http://www.baeldung.com/spring-security-create-new-custom-security-expression</a>!</p>
  
  <p>I have some questions:</p>
  
  <ol>
  <li><p>What aproach to use: "User > Group > Roles > Permissions" ||  "User > Roles > Permissions"?</p></li>
  <li><p>What is the best practices rules for implements RBAC in Spring Security?</p></li>
  </ol>