how to do role-based access control with java and sql?

[techguy_chicago]

Hi all,

I'm looking for a somewhat pluggable RBAC mechanism for my web apps.
I've used the Struts-based stuff, which seemed ok for my purposes (not
using Struts right now - trying to find some time to learn more about
Faces), I've built an XML-based solution from scratch which worked
fine, but now I'm hoping to find a few classes which do most of that
authorization scheme work for me. Something simple and straightforward
that looks in a table or two, compares 'users' with 'actions' and
possibly some 'conditions' and returns an AUTHORIZED or a
NOT_AUTHORIZED.

Willing to look at commercial stuff, too, if it's cheap.

Thanks for any help!

 

[techguy_chicago]

Answer part of my own question - it seems Tomcat does the user/role
thing via it's JDBC Realm stuff. Now I just need to build some type of
infrastructure to support different access levels per role, etc.