I am under a tight deadline, so am afraid of spending too much time learning JAAS only to find that it is not flexible enough to meet certain needs.
The thread "ASP Model" was begun under the EJB forum because it was initially architectural in nature. However, since security has become the just of it, can you please view the "ASP Model" thread on the EJB forum? Any input will be greatly appreciated.
I answered the thread. The summary is that there is no support coming in the short term.