[ http://jira.jboss.com/jira/browse/JBRULES-399?page=all ] Michael Neale updated JBRULES-399: ---------------------------------- Description: For ben. This authentication/permissions should be tied to the user context that JAAS established - user out of the box as much as possible. Permissions are given to perform user actions (or perhaps access to "areas" - but not individual rules, that is what ACLs are for). Refer to seperate JBRULES-428 for details on ACL. was: For ben. This authentication/permissions should be tied to the user context that JAAS established. The only things that need to be programmatic are ideally ACLs on a resource. We may need however to show/hide functionality based on the users roles. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira