I can autorize a user based in his roles. But i cant obtain the list of his roles !!!!!!!
This is my login-config.xml <application-policy name="databasePolicy"> <login-module code="org.jboss.security.auth.spi.DatabaseServerLoginModule" flag="required"> <module-option name="managedConnectionFactoryName">jboss.jca:service=LocalTxCM,name=OracleDS</module-option> <module-option name="dsJndiName">java:OracleDS</module-option> <module-option name="principalsQuery">Select Password from Principals where PrincipalID =?</module-option> <module-option name="rolesQuery">Select Role Roles, RoleGroup RoleGroups from Roles where PrincipalID =?</module-option> </login-module> </application-policy> and code: SecurityAssociationHandler handler = new SecurityAssociationHandler(); SimplePrincipal user = new SimplePrincipal(userName); handler.setSecurityInfo(user, password.toCharArray()); lc = new LoginContext("databasePolicy", handler); lc.login(); subject = lc.getSubject(); } catch (javax.security.auth.login.LoginException e) { throw new LoginException(ExceptionConstants.SECURITY_LOGIN, e.getCause()); } catch (Throwable e) { throw new ProgramException(e); } thats ok, CAN I GET THE ROLES OF THE USER ("userName") ??????? View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3877534#3877534 Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3877534 ------------------------------------------------------- This SF.Net email is sponsored by Oracle Space Sweepstakes Want to be the first software developer in space? Enter now for the Oracle Space Sweepstakes! http://ads.osdn.com/?ad_id=7393&alloc_id=16281&op=click _______________________________________________ JBoss-user mailing list JBoss-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/jboss-user