Recently I have been exploring the various security features in Glassfish AS. In this blog entry, I hope to share some of my initial findings related to role based access control.
The following simple problem highlights the need for different roles. Lets say, user 'X' can perform transactions as well as view non-transactional parts of the application. However user 'A' can only view access the...