JSP Fine-Grained Role Access using JBoss/JAAS

[jmejia424]

I know how to use the isCallerInRole from within a Bean. However, I am trying to determine whether to show an input box on a JSP or not based on the security (Role) of the authenticated user.

If the user has the 'Admin' allow them to change the status. However, if they do not have 'Admin' role, only allow them to see the textual representation of the status.

How would I access role information from a JSP or some other client that is not a Session or Entity bean?

[jaejong]

I have the same problem with jboss3.x
for jboss2.4.4 refer to
http://jboss.org/forums/thread.jsp?forum=49&thread=23667&message=3750117&q=Subject+%2B+authenticated#3750117