This is the Citadel security system. It was originally written to fill in some of the holes left by standard J2EE security. Since that time, the Acegi Security System for Spring (http://www.acegisecurity.org/) has come on the scene, and it provides all the functionality you will find here (and then some). The architecture is also much more extensible, which is why I have stopped using Citadel in favor of Acegi Security in my own projects. Feel free to continue using this project if it suits your needs, but unless I receive patches for bugfixes, I do not plan to continue developing this software. Sincerely, Craig Condit