Me again. I think I've got it, but need to test on my production app. I have multiple servlet filters, one of which is my SecurityFilter which deals with Shiro. After my SecurityFilter I have an HibernateFilter, but I've noticed this also inherits from AbstractShiroFilter rather than just implementing Filter itself. I believe the two ShiroFilter's are in conflict, and the HibernateFilter is somehow overwriting the SecurityManager created by the first filter.
I'll confirm this later by changing the HibernateFilter, and let you know if that was the issue. -- View this message in context: http://shiro-user.582556.n2.nabble.com/Custom-WebSecurityManager-not-being-used-by-SecurityUtils-tp6581200p6582980.html Sent from the Shiro User mailing list archive at Nabble.com.
