JAAS and J2EE authorization combination

Question

I've got a custom login module, which authenticates users and associates roles with them. J2EE declarative security works just fine (isCallerInRole, etc).
What I want now, is to extend the system to grant permissions to roles - to allow a finer-grainer level authorization.
I've been reading the Security Guide - in fact I've pretty much read the whole thing, But I still have a question.
How do I store the permission to role mappings in my database (which already contains roles and users) and grant the permissions to roles?
Do I need to use the JAZNPolicy object and grant various permissions to all my roles upon app startup? What's the best way?
One more point, I don't want to store the role-permission mappings in system-jazn-data.xml or in LDAP. I need to stick with the DB schema we have in place.

Answer 1

You can use the jazn admintool to grant policies:
1)
http://download-west.oracle.com/docs/cd/B31017_01/web.
1013/b28957/admintool.htm#CIHJGHHE
Then you can use the -grantperm to grant permissions
to roles. We provide a DB Table login module in
10.1.3.1:
http://iasdocs.us.oracle.com/iasdl/101310_final/web.10
13/b28957/loginmod.htm#BABCDDAI)
You may want to check this out since it seems to fit
the bill for your requirements.I have a login module already. don't need the included db table module.
I can't use the admin tool - I need to provide screens in my app to allow administrative-type users to modify the permissions associated with roles. So I need to do this programmatically and store the role-permission mappings in my database.