Declarative Web Application Security with Servlets and JSP

 

http://www.informit.com/articles/printerfriendly.asp?p=26139