Expression-Based Access Control alternatives?

Are there any alternatives to Expression-Based Access Control ? And is it still used nowadays? Also, could Angular replace apache tiles?

thanks,