selecting content to display based on user in Grails with Spring Security - grails

Question

I have a Grails app that has a Domain for People, Location, Pictures and Users. Controllers and Views have been generated. I have my index page sec:tagged so that the admin can see the controllers to upload files, create data, and users.
Users have a username, password and location. When a user logs in I want them to see the files that pertain to their location. There can be multiple users attached to a location. But I want every user with that location to see the associated files. I stared with the #Secure but moved to the sec: tags. Now I just need to limit the display of files based on location. Any advice?
Here is the code I have so far for the user display
<sec:access expression="hasRole('ROLE_USER')">
<% def user = springSecurityService.getCurrentlyLoggedInUser()
def aPerson = user.person
def locations = Location.findAllByPerson(aPerson)
locations.each ${it.picture} %>
<g:select name="picture" from="${aPerson.all()}"/>
</sec:access>
This displays nothing on the User page.

Answer 1

First thing, avoid <% %> at all costs. Secondly, I have no idea what you think this code is supposed to be doing:
<g:select name="picture" from="${aPerson.all()}"/>
Lastly, it would help to see your Domain code to understand the actual relationship between all of them. But moving forward with what you have provided, I'd approach it like this:
controller
def someAction() {
def user = springSecurityService.getCurrentlyLoggedInUser()
def aPerson = user.person
def locations = Location.findAllByPerson(aPerson)
[aPerson: aPerson, locations: locations]
}
view
<!-- only use the expression tag if you actually need an expression -->
<sec:ifAllGranted roles='ROLE_USER'>
<g:each in="${locations}" var="location">
<!-- do something with each location -->
</g:each>
<g:select name="picture" from="${aPerson.all()}"/>
</sec:ifAllGranted>