JACC is introduced as part of
J2EE 1.4. This helps to integrate Pluggable Authorization policy providers to facilitate authorization. This helps in role-based authorization using a JACC compliant security provider. (example: Sun Access Manager, may be Netegrity).
/Ramesh