Grid security
Recently, I've become quite involved experimenting with lightweight grid frameworks (Hazelcast, Gigaspaces, Infinispan).

However, I've been somewhat surprised than almost none of the frameworks I tried has any ACL or role based security features built in.

What approaches are generally used to compensate for this? Am I supposed to only use the grid to share data between trusted server-side applications and use the traditional JEE stack (i.e. a conventional DAO-layer) to access data from client or non-trusted server applications? Are there any grid frameworks that provide ACL capabilities for accessing data in the grid (I'd be happy with some ad-hoc stuff, although complying to J2EE role concepts would be nice)?
Grid security
===

Recently, I've become quite involved experimenting with lightweight grid frameworks (Hazelcast, Gigaspaces, Infinispan).

However, I've been somewhat surprised than almost none of the frameworks I tried has any ACL or role based security features built in.

What approaches are generally used to compensate for this? Am I supposed to only use the grid to share data between trusted server-side applications and use the traditional JEE stack (i.e. a conventional DAO-layer) to access data from client or non-trusted server applications? Are there any grid frameworks that provide ACL capabilities for accessing data in the grid (I'd be happy with some ad-hoc stuff, although complying to J2EE role concepts would be nice)?