Hibernate authentication

I'm on a distributed application over RMI , i use hibernate on the the server side, i've to develop a declarative permission check for CRUD operations.
I think interceptor or events could help me, but i don't know how to keep the users' credentials on the server side. (I use JAAS for authentication), i tought at a token approach, but doesn't seems very scalar.
Can you suggest frameworks, patterns or generic solutions?

Thank you