Rickard, You have to construct an Identity object yourself or obtain one from the container implementation in this case. The isCallerInRole() method expects an Identity object as an argument. As I suggested in an earlier posting, you have to either define your own subclass of Identity or use one implemented by the vendor. -Jian Hi! Phil Bates wrote: > Identity is an abstract class. So you cannot construct it. Construction of > identities can only happen via derived classes - & is therefore, currently, > vendor specific. Yes, so I'll reiterate my reply to Jian: don't use Identity directly, but rather use getName() and do the comparisons on the String-level. Hopefully JAAS will make authorization much better in the next round of J2EE. I for one am very impressed with the API at least. /Rickard -- Rickard
�berg
