If you still haven't gotten around to using or trying out Acegi for locking down your Java applications. This blog post will give you 5 tips on making your learning experience easier.
Get ACEGI working using InMemoryDaoImpl. Divide your work by focusing on getting the security features working before integrating this with your DB or AuthenticationService. This way you can isolate your issue to ACEGI settings only.
Read the full post : http://www.ideyatech.com/resources/?p=46