I am currently working out the addition of an optional new MD-SAL ODLAuthorizingRealm.  For those not familiar with AAA abstractions, Realms are configurable (currently through shiro.ini), and no one actually needs to use this new realm (fully backwards compatible).  However, based on community feedback, I know several people are interested.  I have uploaded a patch with my current API thoughts [0];  I would like to invite anyone who has interest in using this to provide feedback so that we can nail down a great API.  Please be harsh now, as it is hard to change later!