Xacml with J2EE?

is anybody working on xacml integration with j2ee apps?

It looks natural to embed xacml as access control mechanism into EJBs,
for example. The existing stuff in EJB spec is so simple, that almost
useless, imho.

On the other hand, xacml could fit well. E.g., all EJB properties would
become attributes, user's identity becomes a subject. It could be
possible to use xacml syntax in deployment descriptors of j2ee
components. Just thinking

Argyn