Alternatives to spring-security in Java (spring)

Question

I'm looking for a good security framework that allows to annotate parameter based access rules to methods.

Basicly i want to check if the authenticated user is allowed to call a certain method with a specific object as a parameter.

Spring security would serve my needs but because of this (spring forum) i'm looking for alternatives if i'm unable to get it to work.

Requirements:

• method security based on config or annotations, i want to avoid puting my security code insite my service methods
• rules are based on parameters of the methods, simple role based security is not enough
• spring support out of the box is a plus

Any recommendations?

Answer 1

Apache Shiro stands in competition to Spring Security. Is easier, covers more. See here.