Applying Security Generally

[GlennODickson]

Have I got this right?   Using J2EE security can I restrict access to JSP pages based on the user that logins? So when a user requests a page and they do no thave access they are denied?   I assume that the username needs to be in a table say "user" but how does that user get linked to the role?   What are the general steps of applying security to web pages/resources etc     TIA   Glenn