"The method recited in claim 12, further comprising the steps of including a link to a resource in the Web page that is communicated to the client only when the roles associated with the user satisfy an access rule." . . . .