Hi Stephan, Currently we've got one Authorizer per router and a common Authenticator for all the routers.
Having an Authorizer per Resource would definitely do the trick, but we've got too many Resources in our app. So that'd be too distributed for the app. I'd quite like to retain the Authorizer per Router config. Am today looking into JAAS and thinking of implemeting someting on those lines. Though haven't got much further yet. But am aware, that Restlet does have a JAAS extension.... Cheers! Nirav ------------------------------------------------------ http://restlet.tigris.org/ds/viewMessage.do?dsForumId=4447&dsMessageId=2449057
