[jboss-user] [JBoss Portal] - Re: Best practice: secure direct web app access