...
The implementation is completely unaware of the security scheme being used. It relies on abstraction and is using security managers that implements the org.codehaus.aware.security.SecurityManger interface. The default implementation is using JAAS (Java Authentication and Authorization Service).
...
h2: Security Aspects
h2: Security Managers