> From: Brad O'Hearne [mailto:[EMAIL PROTECTED] > Subject: Re: Bug in RealmBase, JAASRealm, and/or Requestt > object preventing proper role authorization > > The JAASRealm takes whatever user principal you have and the role > principal you have added to the subject, and creates a new > GenericPrincipal class
That's the part I was missing - that JAASRealm creates a new object, and does not attempt to use your custom principal, even if it is a subclass of GenericPrincipal. > Btw, it appears that this was already logged as bug: > http://issues.apache.org/bugzilla/show_bug.cgi?id=37044 The resolution is fixed, but it doesn't say what build level the fix will be in. Could check the nightlies, I suppose. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]