Authorization concepts and solutions for J2EE applications

 

http://www.ibm.com/developerworks/websphere/library/techarticles/0607_ilechko/0607_ilechko.html