diff --git a/pom.xml b/pom.xml
index 25bb34579f..26c9644da1 100644
--- a/pom.xml
+++ b/pom.xml
@@ -401,6 +401,9 @@
     <freemarker.version>2.3.19</freemarker.version>
     <jetty.version>7.6.5.v20120716</jetty.version>
     
+    <!-- security libraries -->
+    <shiro.version>1.2.1</shiro.version>
+    
     <!-- repostitory libraries -->
     <jgit.version>2.0.0.201206130900-r</jgit.version>
     <svnkit.version>1.7.5-2</svnkit.version>
diff --git a/scm-core/pom.xml b/scm-core/pom.xml
index 04253635c8..8b6f57597d 100644
--- a/scm-core/pom.xml
+++ b/scm-core/pom.xml
@@ -33,6 +33,14 @@
       <version>${slf4j.version}</version>
     </dependency>
     
+    <!-- security -->
+    
+    <dependency>
+      <groupId>org.apache.shiro</groupId>
+      <artifactId>shiro-core</artifactId>
+      <version>${shiro.version}</version>
+    </dependency>
+    
     <!-- injection -->
 
     <dependency>
diff --git a/scm-webapp/pom.xml b/scm-webapp/pom.xml
index 30d37cbd6b..d922828df9 100644
--- a/scm-webapp/pom.xml
+++ b/scm-webapp/pom.xml
@@ -64,6 +64,20 @@
       <artifactId>scm-git-plugin</artifactId>
       <version>1.21-SNAPSHOT</version>
     </dependency>
+    
+    <!-- security -->
+
+    <dependency>
+      <groupId>org.apache.shiro</groupId>
+      <artifactId>shiro-web</artifactId>
+      <version>${shiro.version}</version>
+    </dependency>
+            
+    <dependency>
+      <groupId>org.apache.shiro</groupId>
+      <artifactId>shiro-guice</artifactId>
+      <version>${shiro.version}</version>
+    </dependency>
 
     <!-- rest api -->