Is there some ready-to-use ACL mechanism for JSF? I know JBoss Seam comes with something like that, but switching to JBoss Seam is not an option in my case.
What I need is to easily define which pages given user is allowed to see and which actions to invoke.