Our group is involved in the European funded Webocracy project in which an e-government system called Webocrat has been designed and implemented. Our responsibility is to provide mechanisms guaranteeing secure and reliable access to Webocrat. According to the security requirements from the city councils involved in the project we have implemented a generic and extensible security architecture called CSAP. In this paper we will shortly describe the CSAP architecture and a web-based administration console supporting the administration of RBAC-based authorization and access control services.