[leonard]

Code based security is entirely coded in the application itself. Role based security uses one of the authentication/authorisation mechanisms of the application server.