http://anil-identity.blogspot.com/2009/06/jboss-as-51-security-features.html Maybe XACML for web applications can help you? View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4236248#4236248 Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=4236248