Storing usernames, password, and roles

[jkim9]

I am a newbie and working with JBoss 3.2.1, I like to know about how JBoss stores users information. I know one way is to use users and roles properties files but i want to know on database option. What database are there that i can use, can it be any database? if not I like to know what are the options with database and/or database server..... thanks in advance!

[ahardy66]

Check out the documentation about login modules, JAAS and realms. That'll get you started. Oh, yes, you can use any database that you can set up a dataservice for.

[pearl81]

remember one thing though. j2ee in general falls short when you want to do declarative authorization. for eg. if you're designing an application where certain people have certain privileges that are data-dependent you have to write security interceptors.