Does anyone have any recommendations for me on how to manage user roles on the Java version of Google App Engine?
+1
A:
As documentation states here
App Engine does not support custom security roles () or alternate authentication mechanisms () in the deployment descriptor. Security constraints apply to static files as well as servlets.
So you do not left with much other then coding work with ACLs in to your app all by hand and this is highly application design dependent.
Boris Daich
2009-09-22 23:37:09