title: Java EE Security - Which method to use?
body: <p>Which one is the best approach/method to implement security in Java EE?(JPA/JSPs)</p>
  
  <p>I'm working on a personal project so I can learn Java EE and I am a little confused on how to approach the AUTHORIZATION and AUTHENTICATION process on my website.</p>
  
  <p>I have different roles and I don't want certain users to access certain parts of the website. So I've been searching for docs and tutorials and etc, but everything I find dates to more than 3-4 years ago. Is there anything more recent that I should look into?</p>
  
  <p>Here are some of the things I found:</p>
  
  <p><a href="http://www.oracle.com/technetwork/developer-tools/jdev/oc4j-jaas-login-module-083975.html" rel="nofollow noreferrer">http://www.oracle.com/technetwork/developer-tools/jdev/oc4j-jaas-login-module-083975.html</a></p>
  
  <p>Any help would be greatly appreciated!!! :)</p>