We are planing to make a JSP + ejb hosting. But there is one problem: how to prevent changing JSPs of one user by another user? Can I specify java.policy separatly for each war or ear?
