Hello, After further investigation I see the problem but I do not know why it is doing this. I see the DefaultSecurityManager has an Authorizer object that has a list of realms. We have 2 types of realm objects: A PortalRealm and a PortalBaselineRealm. When the isPermitted() is called for a user, it should use the PortalRealm object. However, running the debugger I see that there is 1 object in the realms list and it is a PortalBaseRealm. It should be the PortalRealm. This only started happening when changed the code to use one Security Manager. This does not happen when I create a new Security Manager object each time I authenticate (the old way). We are setting the realm on the Security Manager object via securityManager.setRealm(realm). Thank you for your help in advance.
-- View this message in context: http://shiro-user.582556.n2.nabble.com/Too-many-threads-created-when-calling-isPermitted-tp7578725p7578741.html Sent from the Shiro User mailing list archive at Nabble.com.
