Some developers can't wait that DeltaSpike delivers a security solution. We need to give a more low level solution in the meantime. So a quick start showing how to get the best from JAAS in java EE 6 (with container configuration and code) is very important in m opinion