along the same lines of
http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3854145
http://www.theserverside.com/discussions/thread.tss?thread_id=32640
i am looking at enhancing a webapp login (to do such things as log success/failure and enforce a throttle on failed logins).

so i am wondering if there's a way to do this with an interceptor or an mbean. but looking at the standardjboss.xml, i don't see where a webapp invocation would follow any of the interceptor chains (if that's what they are called) enumerated.

is there a way to wrap the j_security_check with one of:
1. interceptor
2. mbean
3. aspect
4. something else...