Hi

We are working on an Office Automation project, it is a Java web-based
application developed using Struts MVC framework.

Is JAAS a suitable solution for applying security on such systems? I
don't think there would be any need for other types of authentication
but user name and password checking, isn't JAAS too complicated for
such thing?

And what about the authorization? I found only URL permission checking
solutions, but they are not suitable, clients have access to links but
they get permission errors clicking them. It would be much better to
not have access to those links and they are invisible for that user,
is there any solution or sample by JAAS for such task?

In this system we want let Admin grant users dynamicaly and easily, is
JAAS a good solution for such a thing?

Regards,
Amir Pashazadeh