SecurityInnovation/TMContentReview — Issue #23: Authentication and Authorization Are Required for All Sensitive Pages
Author: SergeTruth
Created: 2011-11-07 22:14:46+00:00
State: open

Have any anyone really implemented an authorization scheme based on JAAS.
I don't know how realistic this is.

Do you guys have guidance for implementing a workable JAAS authorization scheme cause I think you are leading these guys down a rat hole.