Where should I store custom permissions for my web app

I'm wondering where is the ideal place to store custom permissions in my web applications.

For example I have the following permissions:

AdminPermission ReadPermission WritePermission

At the moment I store these in the static utilities class as the const开发者_C百科ant string type objects.

Thank you

---

Somehow I guess you are talking about a Java app. You could try to externalize these resource in files, like in Tomcat (e.g. tomcat-users.xml).

---

Decided to go for a database approach with enums referencing records in xml config.