Acegi security or just plain JAAS?
i did it with plain jaas. the most standard way.
One extra change i'm going to make. I heard good things about facelets. But http://www.threewisemen.ca triggered me to actually take a look. As is mentioned on other places in the web, i really think that facelets fit JSF like a glove. great ! it will be used in the renewed jbpm webapp.
Great, I'm also looking into facelets and like it alot.... but you know.... time....
Regarding security, Acegi would be nice. Mule also uses it and it's kind of flexible and can use JAAS as well.
I have most of the web app converted already to facelets. I'd be happy to contribute it back. I'll post it at an URL and you can take a look.
- the custom tag that brings up the workflow diagram needs to be built as a JSF component
- I get random exceptions on my workflows; not sure the root cause yet
My major caveat with Facelets is having to force id attributes all over the place or you get duplicate ID messages. Not sure where this bug lies.
The best thing about this is that I've factored out a template (great feature in Facelets), which makes it easy to brand the interface. Unfortunately my default is a plain white page (no jboss branding).
Oh forgot one thing, my major remaining piece of work for the facelets conversion is switching the filter-style session techniques to an injection-style that should be more natural in Facelets (plus I'm hoping compatible with Portlets once things settle there).