title: Java EE Role Management systems - do they exist?
body: <p>I'm looking at creating a decentralized role-management system which integrates with Java EE roles. Does anything like this exist?</p>
  
  <p>Example use cases:</p>
  
  <p>System A is a limited-access system which uses corporate roles. John joins a team, and requires SYSTEM_A_READONLY to perform his function. He logs on to the decentralised role-management system, and puts in a request for SYSTEM_A_READONLY. Bill is the administrator for System A, and receives a notification that John has applied for this access. He can then log on to the same system and approve the request. John now has access to System A.</p>
  
  <p>System B is a sensitive customer management system. It has 1 role for each company that it serves. Currently it has SYSTEM_B_CLIENT_FOO, SYSTEM_B_CLIENT_BAR, etc. Greg is the administrator for this system, and he is notified by the sales team that TNT have signed on as a customer. He logs on to the role management system, and adds the new client. Web Application C (hosted remotely, but still using corporate roles) detects the new role, and adds it as an option for it's users.</p>
  
  <p>Hope that makes sense. I've looked into making it myself, but it seems like a requirement that must be quite common.</p>