Shiro with JdbcRealm

[james agada]

I have been able to setup shire to use a jdbcrealm and authenticate against
the database. However, it does not appear to use the permissions. I want to
set a role to have permissions only to run the ToDoItems fixture service
and I give the permission as so  *:ToDoItemsFixturesService:install:*. But
the user with the role still gets access to everything. Is there something
I am doing wrong?