Setting up authentication and access control in Spring Security is painstaking, but you can draw on very powerful capabilities.