hey to tell you the truth I'm haven't digged in that much to know when exactly that happens, cause I didn't have to. And I think you don't have to either. >From my understanding realms are called when framework needs to authenticate principal. And realms should load "user stuff". So if you're using instance of AuthenticatingRealm then only authentication info must be set by your realm but if you use instance of AuthorizingRealm, then authorizing info must be set.
This is to help you understand the what each class does: (but I think you allready read it) http://incubator.apache.org/shiro/architecture.html Kind regards Armando -- View this message in context: http://shiro-user.582556.n2.nabble.com/How-to-add-a-role-to-the-subject-tp5562700p5563065.html Sent from the Shiro User mailing list archive at Nabble.com.
