AuthorizATE is a user management and authorization subsystem. User management features includes user editing, password changing, etc and, like all JavATE subprojects, is repository independent so you can have your users in database or in a LDAP directory.
Authorization is object based. This means that an operation authorization depends not only by the user attributes, like in roled based authorization systems, but also by the object on which the operation has to be performed.
