[theute]

I'm neither Julien neither Roy, but a Jira task could still be useful to delegate to the security framework instead of JAAS directly for the UserPortlet and RolePortlet, it would unify things better.