dhis2 security

Hi devs,

Congrats on 2.0.5!

I have a question on security.
Please how is it implemented?
Is it based on spring security? and where are the config files?
working on allowing preferential access to a couple of resources...and also for authentication of web service calls.

thanks, in anticipation...

BTW: how can I search the mailing list archive?