Main benefit of using Seam3.0 security module
===

Authorizations in Seam 3 are hard coded. A snippet code:

     if (identity.hasRole("manager", "Head Office", "OFFICE")) {
          report.addManagementSummary();
       }

 I think that authorizations rules generally are administration tasks, then mustn't to be hard coded.  

In other hand, i don't found the utility of using PicketLink IDM. In fact, after creating identity Entites, management of these identity seem to be simple CRUD operations, in that case what is the benefit of using an external framework for  simply do a CRUD operation?

Thank