isUserInRole does not work in jboss 4.0.0

[furykid]

I am using basic authentication based on UsersRolesLoginModule
which works fine for 3.2.x
but doesnt work unter 4.0.0

none of my roles are accepted by a call to request.isUserInRole()

logfile output seems ok !
org.jboss.security.auth.spi.UsersRolesLoginModule authentication returns loginOk=true
org.jboss.security.plugins.JaasSecurityManager.APP returns the correct principal and ALL defined roles are listed in the server.log.

any clues ?
furykid

[mpikounis]

I have exactly the same problem. Even though everything works on JBoss 3.2, when I deployed on JBoss 4.0 is authenticates users but isUserInRole seems to always return false.

Is this a known bug? Is there a work-around?

[starksm64]

4.0.0 HttpServletRequest.isUserInRole Security Patch

[cjohan]

"mpikounis" wrote:
I have exactly the same problem. Even though everything works on JBoss 3.2, when I deployed on JBoss 4.0 is authenticates users but isUserInRole seems to always return false.

Is this a known bug? Is there a work-around?

I also had exactly this same problem running jboss-4.0.0. However, after upgrading to jboss-4.0.1, the problem went away.

I built jboss-4.0.1 from jboss-4.0.1-src using j2sdk_1.4.2_06.