I'm doing a system to control process to select candidates to work (In Brazil we call Human Resourses - recruting and selecting).
So, I have users that can be a client/enterprise, a candidate (that can edit his information and look at the job openings) or the admin (user that can register a enterprise, register the selective process, and other process).
So, how can I do a simple and professional access control? I don't wanna nothing hard, because I need to do fast.
I only know use JSP and Servlets.. maybe a bit of JSF.
(I have no experience and never saw before a access model, and in google isn't easy to found because it's different on each system).