Also note that if you are using roles then there is a bug that doesn't clear them down when Identity.login is performed. This is fixed in CVS but not (as I am aware) in any release version. I think someone should make this more widely known as there is a workaround for it and it could compromise security.
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4035638#4035638 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4035638 _______________________________________________ jboss-user mailing list jboss-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-user
