[soshah]

Basically, we will need all the usecases from every project so that a common api can be derived. We cannot force you to use jacc in your project but certainly an api with a pluggable implementation is a positive direction.

Yes integration between JACC security layer and the workflow application security layer (basically ability to protect JACC resources within the context of a business activity) will be very helpful.