Authorizing users in Axis

[Sharam Fouladgar-Mercer]

Hi,   As an Axis newbie, I am trying to figure out how to authorize users who should be accessing a certain method of my Web Service. Are there any standards out there that I should follow? Other than using the components of WS-Security (which are too new for my liking), I can only think of passing the username and password as parameters in the method, but that is not a standard either I believe (I would be using SSL over HTTP so it would be secure). Any ideas?   Thanks, Sharam