Index: trunk/grails-app/controllers/AppCoreController.groovy
===================================================================
--- trunk/grails-app/controllers/AppCoreController.groovy	(revision 147)
+++ trunk/grails-app/controllers/AppCoreController.groovy	(revision 149)
@@ -4,4 +4,5 @@
 
     def authenticateService
+    def createDataService
 
     def index = { redirect(action:start,params:params) }
@@ -45,5 +46,5 @@
                 }
         }
-    }         
+    }
 
     def changePassword = {
@@ -78,15 +79,27 @@
                 render(view:'changePassword',model:[personInstance:personInstance])
             }
-                
-        }  
+
+        }
     }
 
-    @Secured(['ROLE_Manager'])   
+    @Secured(['ROLE_Manager','ROLE_AppAdmin'])
     def manager = {
     }
 
-    @Secured(['ROLE_AppAdmin'])   
+    @Secured(['ROLE_AppAdmin'])
     def appAdmin = {
     }
 
+    @Secured(['ROLE_AppAdmin'])
+    def createBaseData = {
+        createDataService.createBaseData()
+        redirect(action:appAdmin)
+    }
+
+    @Secured(['ROLE_AppAdmin'])
+    def createDemoData = {
+        createDataService.createDemoData()
+        redirect(action:appAdmin)
+    }
+
 }
Index: trunk/grails-app/controllers/BaseController.groovy
===================================================================
--- trunk/grails-app/controllers/BaseController.groovy	(revision 147)
+++ trunk/grails-app/controllers/BaseController.groovy	(revision 149)
@@ -1,5 +1,5 @@
 import org.codehaus.groovy.grails.plugins.springsecurity.Secured
 
-@Secured(['ROLE_AppUser'])
+@Secured(['ROLE_AppUser', 'ROLE_AppAdmin'])
 abstract class BaseController {
     def whatsit() {
Index: trunk/grails-app/controllers/PersonController.groovy
===================================================================
--- trunk/grails-app/controllers/PersonController.groovy	(revision 147)
+++ trunk/grails-app/controllers/PersonController.groovy	(revision 149)
@@ -1,5 +1,5 @@
 import org.codehaus.groovy.grails.plugins.springsecurity.Secured
 
-@Secured(['ROLE_Manager'])
+@Secured(['ROLE_Manager','ROLE_AppAdmin'])
 class PersonController extends BaseAppAdminController {