Common security for different webapps

[kuzmiigo]

Hello!

I have an EAR with a set of WARs, and application.xml declaring webapps and corresponding root contexts (e.g., /webapp1, /webapp2, etc.). What is the best way to implement common security enforcement (to control access to webapps by URLs and domain objects depending on the current user's rights without duplicating security code). Is it possible to put security-related classes and some XML configuration into separate common JAR?

Thank you,

[greg_greg]

Hi,

See http://jroller.com/comments/habuma/W..._configuration (+ http://www.picklematrix.net/archives/000974.html )

(As per http://acegisecurity.org/articles.html )