appfuse--authentication篇

1. 需要添加acegi-security-0.8.1.jar和commons-codec.jar两个api库。好处：不需要配置container的设置。

从http://raibledesigns.com/page/rd?anchor=re_j2ee_app_server_security中可以看到使用acegi替代container管理的security的好处，见下文：

I used to think that using the container's resources was a good thing, but I'm starting to change my mind. Spring allows you to configure a DataSource connection pool just like Tomcat does, so there's not as many benefits as there once was. Being able to drop a WAR into a directory and have your app work without configuring the server is a very nice thing. What do you think? Are there any advantages to using a container's services anymore?

1. 创建 applicationContext-security.xml 供 spring用，并在metadata/web/web-settings.xml 中将该文件加入到listener
2.