JAAS Question

[AndreFratelli]

I everyone, I'm currently initiating the development of a web app in GWT and I was thinking if JAAS is the way to go for me. In every article I've read so far JAAS is configured in an XML file, something like this:

<security-role-mapping>
<role-name>USERS</role-name>
<group-name>Users</group-name>
</security-role-mapping>

Which makes me wonder: will I be able to add roles, users, groups, etc, programmatically (without restarting the server)? If the application grows in a great deal of number of users (and roles, etc), will it escalate? Not sure if it matters, but I'm using NetBeans + GlassFish. regards

Fratelli