Since there is a bunch of web developers here I thought i'd ask this here..

What do you or your company use for a type of security solution for your internal web apps? What I am talking about is something which lets you configure permission to access methods or execute procedures based on groups

If we have 5 different internal webapps, which works using ajax that accesses webservices or some kind of backend, we would like to use the same security system/configuration for all of these webapps for for each request to access a method or execute a procedure they pass through some sort of filter/system which based on a group configuration tells them if they have the right to access said method/procedure, if they do then proceed to execute if not, return... "error".

Something "general" that would work for several different webapps, is there anything out there? Not sure if I make sense or if people understand what I am asking..