Where should I store custom permissions for my web app

Question

I'm wondering where is the ideal place to store custom permissions in my web applications.

For example I have the following permissions:

AdminPermission ReadPermission WritePermission

At the moment I store these in the static utilities class as the constant string type objects.

Thank you

Answer 1

Decided to go for a database approach with enums referencing records in xml config.

Answer 2

Somehow I guess you are talking about a Java app. You could try to externalize these resource in files, like in Tomcat (e.g. tomcat-users.xml).