Hi Scott, > Then it may not be unless you can order the RolesLoginModule ahead of > the authentication modules, which may not be possible.
Alright, good point, now I understand what you mean. Yes if I could do the roles assignment before doing the real authentication I would indeed be all set and could go with the "sufficient" flag. Well currently our code in this respect needs a little overhaul so that roles caching is more efficient, so I don't want to do any unnecessary stuff unless the user is authenticated. Regards, Sebastian ------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100006ave/direct;at.asp_061203_01/01 _______________________________________________ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
