Guide / tutorial on role based security implementation on Java EE?

[george.labuschagne]

Hi all

I Googled for this but could find anything.

I need to create a Java EE web application that supports role based security. Thus users' access to forms and data will be determined by the role assigned to them.

What is the best practices for implementing this? Can one develop the app and then later add the security or should the app be designed from the start with the security integrated?

Any help and or links will be most appreciated.

[andey]

Below is the security guide for your reference:

https://access.redhat.com/documentation/en-US/JBoss_Enterprise_Application_Platform/6.4/html-single/Security_Guide/index.html

[pjhavariotis]

For EAP 6.4 have a look on the following:

Security Architecture - Red Hat Customer Portal

For EAP 7.0 have a look on the following:

Security Architecture - Red Hat Customer Portal