Solution: With Spring Security configured properly, you can simply secure a flow, a state, or a transition by embedding the secured element with required access attributes specified.

Solution: To secure web flows with Spring Security, you first have to configure a DelegatingFilterProxy filter in the web deployment descriptor (i.e., web.xml).

Solution: You have to register the flow execution listener SecurityFlowExecutionListener in the flow executor to enable Spring Security for web flow.

Solution: You can specify multiple access attributes required for accessing this web flow in the attributes attribute, separated by commas.

Solution: Spring Web Flow 2.0 comes with support for JPA and Hibernate.

Solution: To have Spring Web Flow manage the persistence contexts for your web flows, you have to register a flow execution listener (e.g., JpaFlowExecutionListener for JPA.

Solution: To have Spring Web Flow manage the persistence contexts for your web flows, you have to register a flow execution listener (e.g., HibernateFlowExecutionListener for Hibernate.

Solution: To use Hibernate as the JPA engine, you have to add Hibernate 3, the Hibernate 3 EntityManager, the JPA API, and ehcache.

Solution: you can configure a JPA entity manage factory by providing a data source and a JPA vendor adaptor, where you can configure JPA vendor-specific information.

Solution: To have Spring Web Flow manage the persistence contexts for your web flows, you have to register a flow execution listener in the flow executor.