Doing authorization in a clean way is always tricky, You want a delicate balance between an extreme abstraction and something like embedding roles in-side your compiled code, I have always preferred simple abstraction either using roles and their corresponding mappings in the database or using simple xml file to store action to role mappings.
The tox (Tomcat Oracle & XML) web archive is a foundation for development of HTTP based applications using Tomcat (or some other servlet container) and an Oracle RDBMS. Use of tox requires coding primarily in PL/SQL, JavaScript, and XSLT, but also in HTML, CSS, and potentially Java. Coded in Java and PL/SQL itself, tox provides the foundation for more complex applications to be built.
The tox framework enables the construction of applications using the model/view/controller (MVC) design pattern. With a controller that executes interpreted XML for creating the model and view, developers can construct new functionality. The model is retrieved either via includes or by the execution of Oracle's stored procedures and then passed to an XML Stylesheet transform (XSLT) to construct and return the view. Different combinations and options provide rich dynamic content.
Maverick.NET is a .NET port of Maverick, a Model-View-Controller (aka "Model 2") framework for web publishing. It is a minimalist framework which focuses solely on MVC logic, allowing you to generate presentation using a variety of templating and transfor