how I can dynamic assign a role to a user

[hycowboy]

recentlly I try the EJB3.0. I met a problem. I use org.jboss.security.auth.spi.DatabaseServerLoginModule as the login-module. I store the user and role information in a mysql database. The jboss security system do not take effect right now when I dynamic assign a role to a user by changing the database. It must reboot the jboss.

[bwkennedy]

Just a guess, but it sounds like the behaviour you are seeing is a result of the user credentials being cached by JAAS (the login module will therefore not revisit the database to check for new roles until the cache has expired).

Fore more info, and how you can manually flush the cache after adding a new role to the DB, check out:

http://wiki.jboss.org/wiki/Wiki.jsp?page=CachingLoginCredentials