14.3. JAAS
The
org.modeshape.jcr.security.JaasProvider class is configured to use a specific JAAS policy to perform all authentication and role-based authorization. This is the easiest to use, since most application servers will come with JAAS support and even Java SE applications can pretty easily set up one of the available JAAS implementations.
Note
If no providers are explicitly configured, the JAAS provider is automatically enabled with the "modeshape-jcr" policy.