From: Adam Bien <abien_at_adam-bien.com>
Date: Fri, 9 Sep 2011 13:14:35 +0200

Hi All,

a partial example for configuration API already exists and is even already supported by all J2EE 1.4+ servers. The JSR-115 Java Authorization Container Contract (JACC) is a bit dated but actually a good example for a configuration API: http://download.oracle.com/javaee/1.4/api/javax/security/jacc/package-summary.html

You can manipulate e.g. permissions: http://download.oracle.com/javaee/1.4/api/javax/security/jacc/PolicyConfiguration.html programmatically. We used JACC for building custom security plugins for app servers.

We should extend JACC to all DD in Java EE. Then it would be possible to load the configuration from different sources and even override existing application settings,

Any thoughts?

adam