If u use JBP 2.2.0, it is normal situation, because, You should add to the your portlet declaration (in a portlet.xml file) declaration of a roles.
<security-role-ref> <role-name>role_name</role-name> </security-role-ref> When u use this portlet (using user witch role role_name), then this role will be detected by isUserInRole("role_name") function, by returning true value. reg. MB View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3953379#3953379 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3953379 Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 _______________________________________________ JBoss-user mailing list JBoss-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/jboss-user