In JBAS, you should be able to replace the entire xacml infrastructure with a custom stack by implementing a new PolicyRegistration interface and then writing your own XACML policy module. The JBoss Microcontainer can be used to add in your PR implementation.