ILAY was build on our experience with customers projects that have high-security needs. It became clear to us that although it is comparably simple to get authorization right with Vaadin, it is not obvious to many developers where to start. For example, many developers don’t know if component.setVisible(false) is the right way to deny users access to components ( it is ) or how to deny users access to certain views ( this is done via ViewChangeListener ). So our goal was to come up with a framework that hides away all the Vaadin specifics like how to deny access to views or how to properly hide data in a grid when it should not be visible to the current user.