I created a plexus-security module which I haven't put out in cvs yet, which may be of help. Its very bare bones and I'm pretty happy with it. It provides a SecureRunData, Login stuff, and a SecureActionValve. Maybe you can look at it and see if its useful.

http://codehaus.org/~dandiep/plexus-security.tar.gz

We're going to hold of until alpha-3

We need to put the security in place before doing this.

Permissions are :

• Add Projects
• Edit Projects
• Delete Projects
• Build Projects
• Show Projects
• Add Build Definitions
• Edit Build Definitions
• Delete Build Definitions
• Add Notifiers
• Edit Notifiers
• Delete Notifiers
• Manage Continuum Configuration
• Manage Schedules
• Manage Users/Groups