title: Role based security for OSGi
body: <p>I am searching for a security framework that allows role based security for OSGi services as well as CXF webservices.
  Some time ago I already used spring security but as we now switched to blueprint it is not an option anymore as far as I understood. To configure the access rules I would like to mainly use the standard <a href="http://docs.oracle.com/javaee/5/api/javax/annotation/security/RolesAllowed.html" rel="noreferrer">@RolesAllowed annotation</a>. So what are my best starting points? I also thought about implementing this myself as a blueprint extension but I would prefer an existing solution.</p>