database - Business rules Java app for User -

the description may sound bunch of words here more detailed explanation. have user object mapped database table. want users in different roles. there bunch of - , technically same users in same table them apply different roles. user in role have have 2 fields required, , have have restrictions length , contents on password, time expiration of password, etc.

while can hardcore rules interested find out of there other way define rules , may store in database it's easier load/apply , main idea - change , update them -- without redeploying codebase.

technically stupidest , straightforward solution implement class, serialized, store in db, load, deserialze, call methods on execute rules. problem in changes ruleset ( read "interface" of rule class ) , solution sounds hack.

anytihing else? frameworks? other approaches?

update: not clear. say, have class user.java need define different rules say: 1. need verify length of password, , should be? 2. need require properties required? 3. need track login attempts user? 4. if track, how many login attempts allowed? 5. expire password? 6. if do, in how many days? or months? or weeks? 7. ... , on , on. questions are. - how define rules , operate on user object without modifying , redeploying code base? - how store set of rules?

drools, jbpm, etc. not seem fit task. advice help!

jruleengine heard, sometime planned use similar application.

there many other rule engines though.