I myself got the answer



1. No need to do any configuration for servlets, webserver should be configured to implement jaas. I don't think any webserver is supporting but weblogic 7.0 will support as per bea


2. u have to make changes in java.security file to first implement ur own policy object

make this changes in ur policy file:


policy.provider=sun.security.provider.PolicyFile
auth.policy.provider=com.sun.security.auth.PolicyFile


and u have rewrite this files or extend this file to ur own package and rewrite the code init(URL url) method so that it will read from database and not from file . read the permissions from database and crate a string with a policy syntax and change it to reader object and pass this reader object to policy parser ur dynamic policy will work successfully