SEAM POJO: ROLE BASED ACCESS CONTROL?

[rmadabusi]

I have read "No support for container managed security" if we use POJO beans instead of EJB3. Does this mean I can't use Role based access control using POJO's? (For example, Can I use s.hasRole, s.hasPermission in either JSF or at Bean level if I implement my application in SEAM + HIBERNATE (NO EJB3)?)

Thanks
rmadabusi

[leezard]

I'll join to this question also and ask one more: is it still possible to link different seam applications using SSO (not Jboss SSO, but simple Tomcat valves-based) if I have Seam app without EJB3 ?