> When using JDBCRealm with Tomcat, does anyone know if the > user's roles are > loaded from the database for each request, or are they loaded > once and held > in a session object?
I'm pretty sure the database is always queried. If you have debug on you can see the calls. This is important if you want to dynamically change the roles. Frank Lawlor Athens Group, Inc. (512) 345-0600 x151 Athens Group, an employee-owned consulting firm integrating technology strategy and software solutions. -- To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]> For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>