Michael Shoener wrote:
> What exactly is the "security" workspace used for?

the initial intention of the issue JCR-1171
(Contribute Pluggable Permission and User Management to Jackrabbit)
was to have the ability to store users and groups
in a separate workspace and making them available to
other workspaces through the UserManager.

you can turn this (separate wsp) of by changing the
repository's security-manager configuration (there is a param called
"workspaceName" if i'm not mistaken).
and if i remember properly the default workspace is used if
the param is missing.

that's the work-in-progress status in 1.5 and 1.6... not sure
yet, how this will exactly be for 2.0.

hope that helps
angela