One of the goals of
GlassFish v2 is to
incorporate all the features in
SJS AS 8.2 EE
For the most part this means adding features that everybody would want,
but some features are mostly for backwards compatibility, or because
of specialized needs.
The tradeoffs are acheived via the notion of
Shing Wai has posted
of how the different Security features map to GF v1, GF v2 and its profiles and SJS AS 8.2 EE.
His summary table is very useful, check it out!