[jboss-user] [JBoss Seam] - Re: Security flaw in Seam docs, section 12.3.2

2007-04-04 Thread [EMAIL PROTECTED]
You're right, the roles weren't being removed from the subject. I've fixed this in CVS. View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4034572#4034572 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4034572

[jboss-user] [JBoss Seam] - Re: Security flaw in Seam docs, section 12.3.2

2007-04-04 Thread waynebagguley
How do I remove all the roles in one go? View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4034592#4034592 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4034592 ___ jboss-user mailing

[jboss-user] [JBoss Seam] - Re: Security flaw in Seam docs, section 12.3.2

2007-04-04 Thread [EMAIL PROTECTED]
You have direct access to the subject via Identity.getSubject(), if you want to remove all the roles simply iterate through the principals in the subject until you find the Roles group. Here's an example: | for ( Group sg : Identity.instance().getSubject().getPrincipals(Group.class)