I am designing my first web site and I am trying to protect an entire directory structure (password-protected). I think assigning roles and such is overkill for what I want to do. I simply want to host family pictures on my site in a folder (/photos) and I only want people who I have given the username and password to be able to access that part of the site. I don't need a sign-up feature, just 1 username and 1 password that they can all share for now to access this directory.
I have read the help files and they are doing a lot more then what I am doing. I don't have any EJB's or JSP's with this site. Just static HTML, HTPL, and CSS. I have also read lots on using .htaccess with Apache Server but I would much rather use WebSphere since that is what I will be working on at work soon and Apache 5.5 will not work in my development environment.