Java EE (Java Enterprise Edition) General Discussion

Hi All,

I'm Working with JSF frame work by using Oracle JDeveloper.
In my Application i have to use Authentication and Authorization base on user Role and the Privileges of a Role.

When i can control the user access in the business logic by checking the role and using session tracking in the backing bean of jsp pages and we can redirect the page navigation based upon the condition.

And i have dynamic Roles which can be added at later time to the application.

Is there any special security feature that JAAS provides apart from this. What is the main reason to go for JAAS to get the security.

Thanks in advance.

regards,
Satish Dasari