Spring Security Bonus Module

content/authentication/next-steps/_index.md

@@ -7,15 +7,18 @@ originalAuthor: John Woolbright # to be set by page creator
 originalAuthorGitHub: jwoolbright23 # to be set by page creator
 reviewer: Sally Steuterman # to be set by the page reviewer
 reviewerGitHub: gildedgardenia # to be set by the page reviewer
-lastEditor: # update any time edits are made after review
-lastEditorGitHub: # update any time edits are made after review
+lastEditor: Ben Clark # update any time edits are made after review
+lastEditorGitHub: brclark # update any time edits are made after review
 lastMod: # UPDATE ANY TIME CHANGES ARE MADE
 ---
 
 ## Additional Content
 
 Now that you have successfully added authentication to an existing project you can further explore the topics below:
 
+1. For a walkthrough on how to add roles and privileges to user accounts, take a look at the bonus module.
 1. For a deeper dive into `spring security` you can visit the [official docs](https://spring.io/projects/spring-security).
 1. View [this guide](https://spring.io/guides/gs/securing-web/) that walks through the creation of a spring MVC web application using Spring Security.
-1. [Baeldung Spring Security Basic Authentication](https://www.baeldung.com/spring-security-basic-authentication) walkthrough. This will will walk through the process of basic authentication with Spring with an MVC application.
+1. [Baeldung Spring Security Basic Authentication](https://www.baeldung.com/spring-security-basic-authentication) walkthrough. This will walk through the process of basic authentication with Spring with an MVC application.
+
+{{% children style="h4" %}}

content/authentication/next-steps/bonus-module/_index.md

@@ -0,0 +1,25 @@
+---
+title: "BONUS: User Roles & Spring Security"
+date: 2023-11-14T09:28:27-05:00
+draft: false
+weight: 1
+originalAuthor: Ben Clark # to be set by page creator
+originalAuthorGitHub: brclark # to be set by page creator
+reviewer:  # to be set by the page reviewer
+reviewerGitHub: # to be set by the page reviewer
+lastEditor: # update any time edits are made after review
+lastEditorGitHub: # update any time edits are made after review
+lastMod: # UPDATE ANY TIME CHANGES ARE MADE
+---
+
+This section contains 5 lessons to build out the **authentication**
+and **authorization** features in Coding Events. The video shows the
+final features added as a result of the lessons. You will add user-owned
+data, refactored controllers to make use of services, refactored
+authentication and authorization using Spring Security framework,
+and roles & privileges to restrict access to the Coding Events based
+on assigned user roles.
+
+### TODO: Add Embedded Intro video
+
+{{% children %}}