spring security - Keep users in Config.groovy list in Grails -

is there way define users can use application in list in config.groovy? using grails 2.2.3 , latest versions of spring security core , spring security ldap.

we use active directory authentication, , 2 or 3 people use little application, doesn't seem worthy of making ad group app. simpler define list, , time there new hire instead of adding them ad group have add name external grails config.

i following:

somecontroller.groovy

@secured("authentication.name in grailsapplication.config.my.app.userslist") class somecontroller {  } 

then in config.groovy put code:

my.app.userslist = ['bill', 'tom', 'rick'] 

is possible? if so, terrible idea? lot.

that seems silly. why not have list of users in table? can add/remove table without have modify application.

i , in userdetailscontextmapper make sure username exists in users table.