I'am running into the same problem...
Basically the authentication works but after the successfull authentication and roles association to the Principal the org.jboss.security.SecurityRolesAssociation is called and the Granted Roles are set to null. See the logfile below
10:53:59,713 DEBUG [org.apache.catalina.authenticator.AuthenticatorBase] (http-localhost/127.0.0.1:8080-1) Security checking request POST /mps-admin/pages/public/login.xhtml
10:54:02,824 DEBUG [org.apache.catalina.realm.RealmBase] (http-localhost/127.0.0.1:8080-1) Checking constraint 'SecurityConstraint[Restricted Area]' against POST /pages/public/login.xhtml --> false
10:54:02,824 DEBUG [org.apache.catalina.realm.RealmBase] (http-localhost/127.0.0.1:8080-1) Checking constraint 'SecurityConstraint[Restricted Area]' against POST /pages/public/login.xhtml --> false
10:54:02,825 DEBUG [org.apache.catalina.realm.RealmBase] (http-localhost/127.0.0.1:8080-1) Checking constraint 'SecurityConstraint[Restricted Area]' against POST /pages/public/login.xhtml --> false
10:54:02,825 DEBUG [org.apache.catalina.realm.RealmBase] (http-localhost/127.0.0.1:8080-1) Checking constraint 'SecurityConstraint[Restricted Area]' against POST /pages/public/login.xhtml --> false
10:54:02,825 DEBUG [org.apache.catalina.realm.RealmBase] (http-localhost/127.0.0.1:8080-1) No applicable constraint located
10:54:02,825 DEBUG [org.apache.catalina.authenticator.AuthenticatorBase] (http-localhost/127.0.0.1:8080-1) Not subject to any constraint
10:54:02,826 FINE [javax.enterprise.resource.webcontainer.jsf.application] (http-localhost/127.0.0.1:8080-1) servletPath /pages/public/login.xhtml
10:54:02,827 FINE [javax.enterprise.resource.webcontainer.jsf.application] (http-localhost/127.0.0.1:8080-1) pathInfo null
10:54:02,827 FINE [javax.enterprise.resource.webcontainer.jsf.application] (http-localhost/127.0.0.1:8080-1) URL pattern of the FacesServlet executing the current request .xhtml
10:54:02,846 FINE [javax.enterprise.resource.webcontainer.jsf.lifecycle] (http-localhost/127.0.0.1:8080-1) execute(com.sun.faces.context.FacesContextImpl@6fdf7576)
10:54:02,847 DEBUG [org.apache.tomcat.util.http.Parameters] (http-localhost/127.0.0.1:8080-1) Set encoding to UTF-8
10:54:02,847 DEBUG [org.apache.tomcat.util.http.Parameters] (http-localhost/127.0.0.1:8080-1) Start processing with input [j_idt4=j_idt4&j_idt4%3Ausername=harald&j_idt4%3Apassword=start&j_idt4%3Aj_idt11=Login&javax.faces.ViewState=4594634022935863325%3A6988361266257376733]
10:54:02,847 DEBUG [org.jboss.weld.JSF] (http-localhost/127.0.0.1:8080-1) WELD-000504 Resuming conversation with id null
10:54:02,847 FINE [javax.enterprise.resource.webcontainer.jsf.lifecycle] (http-localhost/127.0.0.1:8080-1) Entering RestoreViewPhase
10:54:02,848 FINE [javax.enterprise.resource.webcontainer.jsf.application] (http-localhost/127.0.0.1:8080-1) URL pattern of the FacesServlet executing the current request .xhtml
10:54:02,848 FINE [javax.enterprise.resource.webcontainer.jsf.application] (http-localhost/127.0.0.1:8080-1) URL pattern of the FacesServlet executing the current request .xhtml
10:54:02,848 FINE [javax.enterprise.resource.webcontainer.jsf.application] (http-localhost/127.0.0.1:8080-1) URL pattern of the FacesServlet executing the current request .xhtml
10:54:02,848 FINE [javax.enterprise.resource.webcontainer.jsf.application] (http-localhost/127.0.0.1:8080-1) Created component with component type of 'javax.faces.ViewRoot'
10:54:02,848 FINE [javax.enterprise.resource.webcontainer.jsf.application] (http-localhost/127.0.0.1:8080-1) Created new view for /pages/public/login.xhtml
10:54:02,849 FINE [javax.enterprise.resource.webcontainer.jsf.application] (http-localhost/127.0.0.1:8080-1) Locale for this view as determined by calculateLocale de_DE
10:54:02,849 FINE [javax.enterprise.resource.webcontainer.jsf.application] (http-localhost/127.0.0.1:8080-1) RenderKitId for this view as determined by calculateRenderKitId HTML_BASIC
10:54:02,849 FINE [javax.enterprise.resource.webcontainer.jsf.application] (http-localhost/127.0.0.1:8080-1) Building View: /pages/public/login.xhtml
10:54:02,850 FINE [javax.enterprise.resource.webcontainer.jsf.application] (http-localhost/127.0.0.1:8080-1) Created component with component type of 'javax.faces.Output'
10:54:02,850 FINE [javax.enterprise.resource.webcontainer.jsf.facelets.tag.component] (http-localhost/127.0.0.1:8080-1) /pages/public/login.xhtml @8,9 <h:body> Component[67606034_4079608] Created: javax.faces.component.UIOutput
10:54:02,850 FINE [javax.enterprise.resource.webcontainer.jsf.application] (http-localhost/127.0.0.1:8080-1) Created component with component type of 'javax.faces.HtmlForm'
10:54:02,850 FINE [javax.enterprise.resource.webcontainer.jsf.facelets.tag.component] (http-localhost/127.0.0.1:8080-1) /pages/public/login.xhtml @9,10 <h:form> Component[67606034_4079626] Created: javax.faces.component.html.HtmlForm
10:54:02,851 FINE [javax.enterprise.resource.webcontainer.jsf.application] (http-localhost/127.0.0.1:8080-1) Created component with component type of 'javax.faces.HtmlOutputLabel'
10:54:02,851 FINE [javax.enterprise.resource.webcontainer.jsf.facelets.tag.component] (http-localhost/127.0.0.1:8080-1) /pages/public/login.xhtml @10,52 <h:outputLabel> Component[67606034_407965c] Created: javax.faces.component.html.HtmlOutputLabel
10:54:02,854 FINE [javax.enterprise.resource.webcontainer.jsf.application] (http-localhost/127.0.0.1:8080-1) Created component with component type of 'javax.faces.HtmlInputText'
10:54:02,861 FINE [javax.enterprise.resource.webcontainer.jsf.facelets.tag.component] (http-localhost/127.0.0.1:8080-1) /pages/public/login.xhtml @11,73 <h:inputText> Component[67606034_4079649] Created: javax.faces.component.html.HtmlInputText
10:54:02,861 FINE [javax.enterprise.resource.webcontainer.jsf.application] (http-localhost/127.0.0.1:8080-1) created validator of type 'javax.faces.Bean'
10:54:02,861 FINE [javax.enterprise.resource.webcontainer.jsf.application] (http-localhost/127.0.0.1:8080-1) Created component with component type of 'javax.faces.HtmlMessage'
10:54:02,861 FINE [javax.enterprise.resource.webcontainer.jsf.facelets.tag.component] (http-localhost/127.0.0.1:8080-1) /pages/public/login.xhtml @12,31 <h:message> Component[67606034_407967a] Created: javax.faces.component.html.HtmlMessage
10:54:02,863 FINE [javax.enterprise.resource.webcontainer.jsf.application] (http-localhost/127.0.0.1:8080-1) Created component with component type of 'javax.faces.HtmlOutputLabel'
10:54:02,863 FINE [javax.enterprise.resource.webcontainer.jsf.facelets.tag.component] (http-localhost/127.0.0.1:8080-1) /pages/public/login.xhtml @14,52 <h:outputLabel> Component[67606034_4079667] Created: javax.faces.component.html.HtmlOutputLabel
10:54:02,863 FINE [javax.enterprise.resource.webcontainer.jsf.application] (http-localhost/127.0.0.1:8080-1) Created component with component type of 'javax.faces.HtmlInputSecret'
10:54:02,864 FINE [javax.enterprise.resource.webcontainer.jsf.facelets.tag.component] (http-localhost/127.0.0.1:8080-1) /pages/public/login.xhtml @15,75 <h:inputSecret> Component[67606034_4079690] Created: javax.faces.component.html.HtmlInputSecret
10:54:02,864 FINE [javax.enterprise.resource.webcontainer.jsf.application] (http-localhost/127.0.0.1:8080-1) created validator of type 'javax.faces.Bean'
10:54:02,864 FINE [javax.enterprise.resource.webcontainer.jsf.application] (http-localhost/127.0.0.1:8080-1) Created component with component type of 'javax.faces.HtmlMessage'
10:54:02,864 FINE [javax.enterprise.resource.webcontainer.jsf.facelets.tag.component] (http-localhost/127.0.0.1:8080-1) /pages/public/login.xhtml @16,31 <h:message> Component[67606034_407969d] Created: javax.faces.component.html.HtmlMessage
10:54:02,864 FINE [javax.enterprise.resource.webcontainer.jsf.application] (http-localhost/127.0.0.1:8080-1) Created component with component type of 'javax.faces.HtmlCommandButton'
10:54:02,864 FINE [javax.enterprise.resource.webcontainer.jsf.facelets.tag.component] (http-localhost/127.0.0.1:8080-1) /pages/public/login.xhtml @18,59 <h:commandButton> Component[67606034_407968e] Created: javax.faces.component.html.HtmlCommandButton
10:54:02,964 FINE [javax.enterprise.resource.webcontainer.jsf.application] (http-localhost/127.0.0.1:8080-1) Created component with component type of 'javax.faces.HtmlMessages'
10:54:02,994 FINE [javax.enterprise.resource.webcontainer.jsf.facelets.tag.component] (http-localhost/127.0.0.1:8080-1) /pages/public/login.xhtml @19,35 <h:messages> Component[67606034_40796bb] Created: javax.faces.component.html.HtmlMessages
10:54:02,995 FINE [javax.faces.component] (http-localhost/127.0.0.1:8080-1) No renderer-type for component j_id1
10:54:02,995 FINE [javax.enterprise.resource.webcontainer.jsf.lifecycle] (http-localhost/127.0.0.1:8080-1) Postback: restored view for /pages/public/login.xhtml
10:54:02,995 FINE [javax.enterprise.resource.webcontainer.jsf.lifecycle] (http-localhost/127.0.0.1:8080-1) Exiting RestoreViewPhase
10:54:02,995 FINE [javax.enterprise.resource.webcontainer.jsf.timing] (http-localhost/127.0.0.1:8080-1) [TIMING] - [149ms] : Execution time for phase (including any PhaseListeners) -> RESTORE_VIEW 1
10:54:02,996 FINE [javax.enterprise.resource.webcontainer.jsf.lifecycle] (http-localhost/127.0.0.1:8080-1) Entering ApplyRequestValuesPhase
10:54:02,996 FINE [javax.enterprise.resource.webcontainer.jsf.renderkit] (http-localhost/127.0.0.1:8080-1) UIForm with client ID j_idt4, submitted
10:54:02,996 FINE [javax.enterprise.resource.webcontainer.jsf.renderkit] (http-localhost/127.0.0.1:8080-1) No decoding necessary since the component j_idt5 is not an instance or a sub class of UIInput
10:54:02,996 FINE [javax.enterprise.resource.webcontainer.jsf.renderkit] (http-localhost/127.0.0.1:8080-1) Set submitted value harald on component
10:54:02,996 FINE [javax.enterprise.resource.webcontainer.jsf.renderkit] (http-localhost/127.0.0.1:8080-1) new value after decoding harald
10:54:02,996 FINE [javax.enterprise.resource.webcontainer.jsf.renderkit] (http-localhost/127.0.0.1:8080-1) No decoding necessary since the component j_idt6 is not an instance or a sub class of UIInput
10:54:02,997 FINE [javax.enterprise.resource.webcontainer.jsf.renderkit] (http-localhost/127.0.0.1:8080-1) No decoding necessary since the component j_idt8 is not an instance or a sub class of UIInput
10:54:02,997 FINE [javax.enterprise.resource.webcontainer.jsf.renderkit] (http-localhost/127.0.0.1:8080-1) Set submitted value start on component
10:54:02,997 FINE [javax.enterprise.resource.webcontainer.jsf.renderkit] (http-localhost/127.0.0.1:8080-1) new value after decoding start
10:54:02,997 FINE [javax.enterprise.resource.webcontainer.jsf.renderkit] (http-localhost/127.0.0.1:8080-1) No decoding necessary since the component j_idt9 is not an instance or a sub class of UIInput
10:54:02,997 FINE [javax.enterprise.resource.webcontainer.jsf.renderkit] (http-localhost/127.0.0.1:8080-1) This command resulted in form submission ActionEvent queued.
10:54:02,997 FINE [javax.enterprise.resource.webcontainer.jsf.renderkit] (http-localhost/127.0.0.1:8080-1) End decoding component j_idt11
10:54:02,997 FINE [javax.enterprise.resource.webcontainer.jsf.renderkit] (http-localhost/127.0.0.1:8080-1) No decoding necessary since the component j_idt12 is not an instance or a sub class of UIInput
10:54:02,998 FINE [javax.enterprise.resource.webcontainer.jsf.lifecycle] (http-localhost/127.0.0.1:8080-1) Exiting ApplyRequestValuesPhase
10:54:02,998 FINE [javax.enterprise.resource.webcontainer.jsf.timing] (http-localhost/127.0.0.1:8080-1) [TIMING] - [2ms] : Execution time for phase (including any PhaseListeners) -> APPLY_REQUEST_VALUES 2
10:54:02,998 FINE [javax.enterprise.resource.webcontainer.jsf.lifecycle] (http-localhost/127.0.0.1:8080-1) Entering ProcessValidationsPhase
10:54:02,999 FINE [javax.enterprise.resource.webcontainer.jsf.renderkit] (http-localhost/127.0.0.1:8080-1) No conversion necessary for value harald of component username
10:54:03,000 FINE [javax.enterprise.resource.webcontainer.jsf.renderkit] (http-localhost/127.0.0.1:8080-1) No conversion necessary for value start of component password
10:54:03,001 FINE [javax.enterprise.resource.webcontainer.jsf.lifecycle] (http-localhost/127.0.0.1:8080-1) Exiting ProcessValidationsPhase
10:54:03,001 FINE [javax.enterprise.resource.webcontainer.jsf.timing] (http-localhost/127.0.0.1:8080-1) [TIMING] - [3ms] : Execution time for phase (including any PhaseListeners) -> PROCESS_VALIDATIONS 3
10:54:03,001 FINE [javax.enterprise.resource.webcontainer.jsf.lifecycle] (http-localhost/127.0.0.1:8080-1) Entering UpdateModelValuesPhase
10:54:03,002 FINE [javax.enterprise.resource.webcontainer.jsf.lifecycle] (http-localhost/127.0.0.1:8080-1) Exiting UpdateModelValuesPhase
10:54:03,002 FINE [javax.enterprise.resource.webcontainer.jsf.timing] (http-localhost/127.0.0.1:8080-1) [TIMING] - [1ms] : Execution time for phase (including any PhaseListeners) -> UPDATE_MODEL_VALUES 4
10:54:03,002 FINE [javax.enterprise.resource.webcontainer.jsf.lifecycle] (http-localhost/127.0.0.1:8080-1) Entering InvokeApplicationsPhase
10:54:03,002 FINE [javax.enterprise.resource.webcontainer.jsf.application] (http-localhost/127.0.0.1:8080-1) processAction(j_idt11)
10:54:04,489 TRACE [org.jboss.security.authentication.JBossCachedAuthenticationManager] (http-localhost/127.0.0.1:8080-1) Begin isValid, principal:harald, cache entry: null
10:54:04,490 TRACE [org.jboss.security.authentication.JBossCachedAuthenticationManager] (http-localhost/127.0.0.1:8080-1) defaultLogin, principal=harald
10:54:04,490 TRACE [org.jboss.security.auth.login.XMLLoginConfigImpl] (http-localhost/127.0.0.1:8080-1) Begin getAppConfigurationEntry(MpsAdminRealm), size=3
10:54:04,490 TRACE [org.jboss.security.auth.login.XMLLoginConfigImpl] (http-localhost/127.0.0.1:8080-1) End getAppConfigurationEntry(MpsAdminRealm), authInfo=AppConfigurationEntry[]:
[0]
LoginModule Class: org.jboss.security.auth.spi.DatabaseServerLoginModule
ControlFlag: LoginModuleControlFlag: required
Options:
name=principalsQuery, value=select password from ADMIN_ACCOUNT where username=?
name=dsJndiName, value=java:/datasources/iPadDSForAllApps
name=rolesQuery, value=SELECT ADMIN_PERMISSION.NAME, 'ROLES' FROM ADMIN_PERMISSION INNER JOIN ROLE_PERMISSION ON ADMIN_PERMISSION.ID = ROLE_PERMISSION.ID_PERMISSION INNER JOIN ADMIN_ROLE ON ROLE_PERMISSION.ID_ROLE = ADMIN_ROLE.ID INNER JOIN ACCOUNT_ROLE ON ADMIN_ROLE.ID = ACCOUNT_ROLE.ID_ROLE INNER JOIN ADMIN_ACCOUNT ON ACCOUNT_ROLE.ID_ACCOUNT = ADMIN_ACCOUNT.ID WHERE ADMIN_ACCOUNT.USERNAME = ?
10:54:04,492 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule] (http-localhost/127.0.0.1:8080-1) initialize
10:54:04,492 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule] (http-localhost/127.0.0.1:8080-1) Security domain: MpsAdminRealm
10:54:04,492 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule] (http-localhost/127.0.0.1:8080-1) DatabaseServerLoginModule, dsJndiName=java:/datasources/iPadDSForAllApps
10:54:04,493 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule] (http-localhost/127.0.0.1:8080-1) principalsQuery=select password from ADMIN_ACCOUNT where username=?
10:54:04,493 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule] (http-localhost/127.0.0.1:8080-1) rolesQuery=SELECT ADMIN_PERMISSION.NAME, 'ROLES' FROM ADMIN_PERMISSION INNER JOIN ROLE_PERMISSION ON ADMIN_PERMISSION.ID = ROLE_PERMISSION.ID_PERMISSION INNER JOIN ADMIN_ROLE ON ROLE_PERMISSION.ID_ROLE = ADMIN_ROLE.ID INNER JOIN ACCOUNT_ROLE ON ADMIN_ROLE.ID = ACCOUNT_ROLE.ID_ROLE INNER JOIN ADMIN_ACCOUNT ON ACCOUNT_ROLE.ID_ACCOUNT = ADMIN_ACCOUNT.ID WHERE ADMIN_ACCOUNT.USERNAME = ?
10:54:04,493 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule] (http-localhost/127.0.0.1:8080-1) suspendResume=true
10:54:04,495 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule] (http-localhost/127.0.0.1:8080-1) login
10:54:04,495 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule] (http-localhost/127.0.0.1:8080-1) suspendAnyTransaction
10:54:04,495 DEBUG [org.jboss.jca.core.connectionmanager.pool.strategy.OnePool] (http-localhost/127.0.0.1:8080-1) iPadDS: getConnection(null, WrappedConnectionRequestInfo@5ead5494[userName=ipadpdf]) [1/5]
10:54:04,496 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule] (http-localhost/127.0.0.1:8080-1) Excuting query: select password from ADMIN_ACCOUNT where username=?, with username: harald
10:54:04,500 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule] (http-localhost/127.0.0.1:8080-1) Obtained user password
10:54:04,501 DEBUG [org.jboss.jca.core.connectionmanager.pool.strategy.OnePool] (http-localhost/127.0.0.1:8080-1) iPadDS: returnConnection(2c60020b, false) [1/4]
10:54:04,501 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule] (http-localhost/127.0.0.1:8080-1) resumeAnyTransaction
10:54:04,501 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule] (http-localhost/127.0.0.1:8080-1) User 'harald' authenticated, loginOk=true
10:54:04,501 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule] (http-localhost/127.0.0.1:8080-1) commit, loginOk=true
10:54:04,501 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule] (http-localhost/127.0.0.1:8080-1) getRoleSets using rolesQuery: SELECT ADMIN_PERMISSION.NAME, 'ROLES' FROM ADMIN_PERMISSION INNER JOIN ROLE_PERMISSION ON ADMIN_PERMISSION.ID = ROLE_PERMISSION.ID_PERMISSION INNER JOIN ADMIN_ROLE ON ROLE_PERMISSION.ID_ROLE = ADMIN_ROLE.ID INNER JOIN ACCOUNT_ROLE ON ADMIN_ROLE.ID = ACCOUNT_ROLE.ID_ROLE INNER JOIN ADMIN_ACCOUNT ON ACCOUNT_ROLE.ID_ACCOUNT = ADMIN_ACCOUNT.ID WHERE ADMIN_ACCOUNT.USERNAME = ?, username: harald
10:54:04,502 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule] (http-localhost/127.0.0.1:8080-1) suspendAnyTransaction
10:54:04,502 DEBUG [org.jboss.jca.core.connectionmanager.pool.strategy.OnePool] (http-localhost/127.0.0.1:8080-1) iPadDS: getConnection(null, WrappedConnectionRequestInfo@5ead5494[userName=ipadpdf]) [1/5]
10:54:04,502 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule] (http-localhost/127.0.0.1:8080-1) Excuting query: SELECT ADMIN_PERMISSION.NAME, 'ROLES' FROM ADMIN_PERMISSION INNER JOIN ROLE_PERMISSION ON ADMIN_PERMISSION.ID = ROLE_PERMISSION.ID_PERMISSION INNER JOIN ADMIN_ROLE ON ROLE_PERMISSION.ID_ROLE = ADMIN_ROLE.ID INNER JOIN ACCOUNT_ROLE ON ADMIN_ROLE.ID = ACCOUNT_ROLE.ID_ROLE INNER JOIN ADMIN_ACCOUNT ON ACCOUNT_ROLE.ID_ACCOUNT = ADMIN_ACCOUNT.ID WHERE ADMIN_ACCOUNT.USERNAME = ?, with username: harald
10:54:04,511 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule] (http-localhost/127.0.0.1:8080-1) Assign user to role ACCOUNT_ADMINISTRATION
10:54:04,511 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule] (http-localhost/127.0.0.1:8080-1) Assign user to role ADMIN_AREA
10:54:04,511 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule] (http-localhost/127.0.0.1:8080-1) Assign user to role APA_ADMIN_AREA
10:54:04,511 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule] (http-localhost/127.0.0.1:8080-1) Assign user to role CREATE_APPLICATION
10:54:04,511 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule] (http-localhost/127.0.0.1:8080-1) Assign user to role ROLE_ADMINISTRATION
10:54:04,512 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule] (http-localhost/127.0.0.1:8080-1) Assign user to role SYS_ADMIN_AREA
10:54:04,512 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule] (http-localhost/127.0.0.1:8080-1) Assign user to role USER_AREA
10:54:04,512 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule] (http-localhost/127.0.0.1:8080-1) Assign user to role USER_PROFILE
10:54:04,512 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule] (http-localhost/127.0.0.1:8080-1) Assign user to role USER_SETTINGS
10:54:04,512 DEBUG [org.jboss.jca.core.connectionmanager.pool.strategy.OnePool] (http-localhost/127.0.0.1:8080-1) iPadDS: returnConnection(2c60020b, false) [1/4]
10:54:04,512 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule] (http-localhost/127.0.0.1:8080-1) resumeAnyTransaction
10:54:04,515 TRACE [org.jboss.security.authentication.JBossCachedAuthenticationManager] (http-localhost/127.0.0.1:8080-1) defaultLogin, lc=javax.security.auth.login.LoginContext@7e8f0680, subject=Subject(1609825897).principals=org.jboss.security.SimplePrincipal@1932581337(harald)org.jboss.security.SimpleGroup@1053755336(CallerPrincipal(members:harald))org.jboss.security.SimpleGroup@1053755336(ROLES(members:CREATE_APPLICATION,USER_AREA,APA_ADMIN_AREA,USER_PROFILE,SYS_ADMIN_AREA,USER_SETTINGS,ACCOUNT_ADMINISTRATION,ADMIN_AREA,ROLE_ADMINISTRATION))
10:54:04,515 TRACE [org.jboss.security.authentication.JBossCachedAuthenticationManager] (http-localhost/127.0.0.1:8080-1) End isValid, true
10:54:04,516 DEBUG [org.apache.catalina.authenticator.AuthenticatorBase] (http-localhost/127.0.0.1:8080-1) Authenticated 'harald' with type 'LOGIN'
10:54:04,519 FINE [javax.enterprise.resource.webcontainer.jsf.lifecycle] (http-localhost/127.0.0.1:8080-1) Exiting InvokeApplicationsPhase
10:54:04,521 FINE [javax.enterprise.resource.webcontainer.jsf.timing] (http-localhost/127.0.0.1:8080-1) [TIMING] - [1519ms] : Execution time for phase (including any PhaseListeners) -> INVOKE_APPLICATION 5
10:54:04,521 FINE [javax.enterprise.resource.webcontainer.jsf.lifecycle] (http-localhost/127.0.0.1:8080-1) render(com.sun.faces.context.FacesContextImpl@6fdf7576)
10:54:04,521 TRACE [org.jboss.security.SecurityRolesAssociation] (http-localhost/127.0.0.1:8080-1) Setting threadlocal:null
10:54:04,531 DEBUG [org.apache.tomcat.util.http.Cookies] (http-localhost/127.0.0.1:8080-1) Cookies: Parsing b[]: JSESSIONID=2QKEwMJrfHNBm3Jpmr5FnIyj; jm_earth_tpl=jm_earth
10:54:04,531 DEBUG [org.apache.catalina.authenticator.AuthenticatorBase] (http-localhost/127.0.0.1:8080-1) Security checking request GET /mps-admin/pages/protected/user/startseite.xhtml
10:54:04,531 DEBUG [org.apache.catalina.authenticator.AuthenticatorBase] (http-localhost/127.0.0.1:8080-1) We have cached auth type LOGIN for principal GenericPrincipal[harald()]
10:54:05,770 DEBUG [org.apache.catalina.realm.RealmBase] (http-localhost/127.0.0.1:8080-1) Checking constraint 'SecurityConstraint[Restricted Area]' against GET /pages/protected/user/startseite.xhtml --> true
10:54:05,771 DEBUG [org.apache.catalina.realm.RealmBase] (http-localhost/127.0.0.1:8080-1) Checking constraint 'SecurityConstraint[Restricted Area]' against GET /pages/protected/user/startseite.xhtml --> true
10:54:05,771 DEBUG [org.apache.catalina.authenticator.AuthenticatorBase] (http-localhost/127.0.0.1:8080-1) Calling hasUserDataPermission()
10:54:05,771 DEBUG [org.apache.catalina.realm.RealmBase] (http-localhost/127.0.0.1:8080-1) User data constraint has no restrictions
10:54:05,771 DEBUG [org.apache.catalina.authenticator.AuthenticatorBase] (http-localhost/127.0.0.1:8080-1) Calling authenticate()
10:54:05,772 DEBUG [org.apache.catalina.authenticator.FormAuthenticator] (http-localhost/127.0.0.1:8080-1) Already authenticated 'harald'
10:54:05,772 DEBUG [org.apache.catalina.authenticator.AuthenticatorBase] (http-localhost/127.0.0.1:8080-1) Calling accessControl()
10:54:05,772 DEBUG [org.apache.catalina.realm.RealmBase] (http-localhost/127.0.0.1:8080-1) Checking roles GenericPrincipal[harald()]
10:54:05,772 DEBUG [org.apache.catalina.realm.RealmBase] (http-localhost/127.0.0.1:8080-1) Username harald does NOT have role ADMIN_AREA
10:54:05,772 DEBUG [org.apache.catalina.realm.RealmBase] (http-localhost/127.0.0.1:8080-1) No role found: ADMIN_AREA
10:54:05,777 DEBUG [org.apache.catalina.realm.RealmBase] (http-localhost/127.0.0.1:8080-1) Username harald does NOT have role USER_AREA
10:54:05,778 DEBUG [org.apache.catalina.realm.RealmBase] (http-localhost/127.0.0.1:8080-1) No role found: USER_AREA
10:54:05,779 DEBUG [org.apache.catalina.authenticator.AuthenticatorBase] (http-localhost/127.0.0.1:8080-1) Failed accessControl() test
10:54:05,779 TRACE [org.jboss.security.SecurityRolesAssociation] (http-localhost/127.0.0.1:8080-1) Setting threadlocal:null
10:54:05,779 DEBUG [org.apache.catalina.core.ContainerBase.[jboss.web].[default-host]] (http-localhost/127.0.0.1:8080-1) Processing ErrorPage[errorCode=403, location=/pages/public/access_denied.xhtml]
10:54:05,780 FINE [javax.enterprise.resource.webcontainer.jsf.application] (http-localhost/127.0.0.1:8080-1) servletPath /pages/public/access_denied.xhtml
10:54:05,781 FINE [javax.enterprise.resource.webcontainer.jsf.application] (http-localhost/127.0.0.1:8080-1) pathInfo null
10:54:05,781 FINE [javax.enterprise.resource.webcontainer.jsf.application] (http-localhost/127.0.0.1:8080-1) URL pattern of the FacesServlet executing the current request .xhtml
10:54:05,781 FINE [javax.enterprise.resource.webcontainer.jsf.lifecycle] (http-localhost/127.0.0.1:8080-1) execute(com.sun.faces.context.FacesContextImpl@6ba7a658)
10:54:05,782 DEBUG [org.apache.tomcat.util.http.Parameters] (http-localhost/127.0.0.1:8080-1) Set encoding to UTF-8
10:54:05,782 DEBUG [org.jboss.weld.JSF] (http-localhost/127.0.0.1:8080-1) WELD-000504 Resuming conversation with id null
10:54:05,788 FINE [javax.enterprise.resource.webcontainer.jsf.lifecycle] (http-localhost/127.0.0.1:8080-1) Entering RestoreViewPhase
10:54:05,788 FINE [javax.enterprise.resource.webcontainer.jsf.lifecycle] (http-localhost/127.0.0.1:8080-1) New request: creating a view for /pages/public/access_denied.xhtml
10:54:05,789 FINE [javax.enterprise.resource.webcontainer.jsf.application] (http-localhost/127.0.0.1:8080-1) URL pattern of the FacesServlet executing the current request .xhtml
10:54:05,790 FINE [javax.enterprise.resource.webcontainer.jsf.application] (http-localhost/127.0.0.1:8080-1) URL pattern of the FacesServlet executing the current request .xhtml
10:54:05,790 FINE [javax.enterprise.resource.webcontainer.jsf.application] (http-localhost/127.0.0.1:8080-1) Created component with component type of 'javax.faces.ViewRoot'
10:54:05,790 FINE [javax.enterprise.resource.webcontainer.jsf.application] (http-localhost/127.0.0.1:8080-1) Created new view for /pages/public/access_denied.xhtml
10:54:05,791 FINE [javax.enterprise.resource.webcontainer.jsf.application] (http-localhost/127.0.0.1:8080-1) Locale for this view as determined by calculateLocale de_DE
10:54:05,794 FINE [javax.enterprise.resource.webcontainer.jsf.application] (http-localhost/127.0.0.1:8080-1) RenderKitId for this view as determined by calculateRenderKitId HTML_BASIC
10:54:05,796 FINE [javax.enterprise.resource.webcontainer.jsf.facelets.factory] (http-localhost/127.0.0.1:8080-1) Resource-Url from external context: jndi:/default-host/mps-admin/pages/public/access_denied.xhtml
10:54:05,796 FINE [javax.enterprise.resource.webcontainer.jsf.facelets.factory] (http-localhost/127.0.0.1:8080-1) Creating Metadata Facelet for: jndi:/default-host/mps-admin/pages/public/access_denied.xhtml
10:54:05,797 FINE [javax.enterprise.resource.webcontainer.jsf.facelets.compiler] (http-localhost/127.0.0.1:8080-1) Starting Unit: TextUnit[0] and adding it to parent: com.sun.faces.facelets.compiler.CompilationUnit@703cab7f
10:54:05,817 FINE [javax.enterprise.resource.webcontainer.jsf.facelets.compiler] (http-localhost/127.0.0.1:8080-1) Namespace Pushed : http://www.w3.org/1999/xhtml
10:54:05,817 FINE [javax.enterprise.resource.webcontainer.jsf.facelets.compiler] (http-localhost/127.0.0.1:8080-1) Starting Unit: com.sun.faces.facelets.compiler.NamespaceUnit@3313dcd1 and adding it to parent: TextUnit[0]
10:54:05,817 FINE [javax.enterprise.resource.webcontainer.jsf.facelets.compiler] (http-localhost/127.0.0.1:8080-1) Namespace Pushed f: http://java.sun.com/jsf/core
10:54:05,817 FINE [javax.enterprise.resource.webcontainer.jsf.facelets.compiler] (http-localhost/127.0.0.1:8080-1) Namespace Pushed h: http://java.sun.com/jsf/html
10:54:05,817 FINE [javax.enterprise.resource.webcontainer.jsf.facelets.compiler] (http-localhost/127.0.0.1:8080-1) Namespace Pushed ui: http://java.sun.com/jsf/facelets
10:54:05,818 FINE [javax.enterprise.resource.webcontainer.jsf.facelets.compiler] (http-localhost/127.0.0.1:8080-1) Finished Unit: com.sun.faces.facelets.compiler.NamespaceUnit@3313dcd1
10:54:05,818 FINE [javax.enterprise.resource.webcontainer.jsf.lifecycle] (http-localhost/127.0.0.1:8080-1) Exiting RestoreViewPhase
10:54:05,818 FINE [javax.enterprise.resource.webcontainer.jsf.timing] (http-localhost/127.0.0.1:8080-1) [TIMING] - [36ms] : Execution time for phase (including any PhaseListeners) -> RESTORE_VIEW 1
10:54:05,818 FINE [javax.enterprise.resource.webcontainer.jsf.lifecycle] (http-localhost/127.0.0.1:8080-1) render(com.sun.faces.context.FacesContextImpl@6ba7a658)
10:54:05,818 FINE [javax.enterprise.resource.webcontainer.jsf.lifecycle] (http-localhost/127.0.0.1:8080-1) Entering RenderResponsePhase
10:54:05,818 FINE [javax.enterprise.resource.webcontainer.jsf.lifecycle] (http-localhost/127.0.0.1:8080-1) About to render view /pages/public/access_denied.xhtml
10:54:05,818 FINE [javax.enterprise.resource.webcontainer.jsf.application] (http-localhost/127.0.0.1:8080-1) Building View: /pages/public/access_denied.xhtml
10:54:05,819 FINE [javax.enterprise.resource.webcontainer.jsf.facelets.factory] (http-localhost/127.0.0.1:8080-1) Creating Facelet for: jndi:/default-host/mps-admin/pages/public/access_denied.xhtml
10:54:05,819 FINE [javax.enterprise.resource.webcontainer.jsf.facelets.compiler] (http-localhost/127.0.0.1:8080-1) Starting Unit: TextUnit[0] and adding it to parent: com.sun.faces.facelets.compiler.CompilationUnit@43283315
10:54:05,826 FINE [javax.enterprise.resource.webcontainer.jsf.facelets.compiler] (http-localhost/127.0.0.1:8080-1) Namespace Pushed : http://www.w3.org/1999/xhtml
10:54:05,826 FINE [javax.enterprise.resource.webcontainer.jsf.facelets.compiler] (http-localhost/127.0.0.1:8080-1) Starting Unit: com.sun.faces.facelets.compiler.NamespaceUnit@76d28ca0 and adding it to parent: TextUnit[0]
10:54:05,826 FINE [javax.enterprise.resource.webcontainer.jsf.facelets.compiler] (http-localhost/127.0.0.1:8080-1) Namespace Pushed f: http://java.sun.com/jsf/core
10:54:05,827 FINE [javax.enterprise.resource.webcontainer.jsf.facelets.compiler] (http-localhost/127.0.0.1:8080-1) Namespace Pushed h: http://java.sun.com/jsf/html
10:54:05,827 FINE [javax.enterprise.resource.webcontainer.jsf.facelets.compiler] (http-localhost/127.0.0.1:8080-1) Namespace Pushed ui: http://java.sun.com/jsf/facelets
10:54:05,827 FINE [javax.enterprise.resource.webcontainer.jsf.facelets.compiler] (http-localhost/127.0.0.1:8080-1) Tag Pushed: /pages/public/access_denied.xhtml @7,46 <html>
10:54:05,827 FINE [javax.enterprise.resource.webcontainer.jsf.facelets.compiler] (http-localhost/127.0.0.1:8080-1) /pages/public/access_denied.xhtml @7,46 xmlns:f="http://java.sun.com/jsf/core" Namespace Bound to TagLibrary
10:54:05,827 FINE [javax.enterprise.resource.webcontainer.jsf.facelets.compiler] (http-localhost/127.0.0.1:8080-1) /pages/public/access_denied.xhtml @7,46 xmlns:h="http://java.sun.com/jsf/html" Namespace Bound to TagLibrary
10:54:05,827 FINE [javax.enterprise.resource.webcontainer.jsf.facelets.compiler] (http-localhost/127.0.0.1:8080-1) /pages/public/access_denied.xhtml @7,46 xmlns:ui="http://java.sun.com/jsf/facelets" Namespace Bound to TagLibrary
10:54:05,827 FINE [javax.enterprise.resource.webcontainer.jsf.facelets.compiler] (http-localhost/127.0.0.1:8080-1) Starting Unit: TextUnit[0] and adding it to parent: com.sun.faces.facelets.compiler.NamespaceUnit@76d28ca0
10:54:05,827 FINE [javax.enterprise.resource.webcontainer.jsf.facelets.compiler] (http-localhost/127.0.0.1:8080-1) Tag Pushed: /pages/public/access_denied.xhtml @9,33 <f:view>
10:54:05,828 FINE [javax.enterprise.resource.webcontainer.jsf.facelets.compiler] (http-localhost/127.0.0.1:8080-1) Starting Unit: /pages/public/access_denied.xhtml @9,33 <f:view> and adding it to parent: TextUnit[0]
10:54:05,828 FINE [javax.enterprise.resource.webcontainer.jsf.facelets.compiler] (http-localhost/127.0.0.1:8080-1) Starting Unit: TextUnit[0] and adding it to parent: /pages/public/access_denied.xhtml @9,33 <f:view>
10:54:05,828 FINE [javax.enterprise.resource.webcontainer.jsf.facelets.compiler] (http-localhost/127.0.0.1:8080-1) Tag Pushed: /pages/public/access_denied.xhtml @11,48 <h:outputText>
10:54:05,828 FINE [javax.enterprise.resource.webcontainer.jsf.facelets.compiler] (http-localhost/127.0.0.1:8080-1) Starting Unit: /pages/public/access_denied.xhtml @11,48 <h:outputText> and adding it to parent: TextUnit[0]
10:54:05,828 FINE [javax.enterprise.resource.webcontainer.jsf.facelets.compiler] (http-localhost/127.0.0.1:8080-1) Finished Unit: /pages/public/access_denied.xhtml @11,48 <h:outputText>
10:54:05,828 FINE [javax.enterprise.resource.webcontainer.jsf.facelets.compiler] (http-localhost/127.0.0.1:8080-1) Finished Unit: TextUnit[1]
10:54:05,828 FINE [javax.enterprise.resource.webcontainer.jsf.facelets.compiler] (http-localhost/127.0.0.1:8080-1) Finished Unit: /pages/public/access_denied.xhtml @9,33 <f:view>
10:54:05,829 FINE [javax.enterprise.resource.webcontainer.jsf.application] (http-localhost/127.0.0.1:8080-1) Created component with component type of 'javax.faces.HtmlOutputText'
10:54:05,829 FINE [javax.enterprise.resource.webcontainer.jsf.facelets.tag.component] (http-localhost/127.0.0.1:8080-1) /pages/public/access_denied.xhtml @11,48 <h:outputText> Component[1852725183_6e6e578b] Created: javax.faces.component.html.HtmlOutputText
10:54:05,829 FINE [javax.enterprise.resource.webcontainer.jsf.application] (http-localhost/127.0.0.1:8080-1) Rendering View: /pages/public/access_denied.xhtml
10:54:05,830 FINE [javax.enterprise.resource.webcontainer.jsf.renderkit] (http-localhost/127.0.0.1:8080-1) component.getValue() returned access denied
10:54:05,830 FINE [javax.enterprise.resource.webcontainer.jsf.renderkit] (http-localhost/127.0.0.1:8080-1) Value to be rendered access denied
10:54:05,830 FINE [javax.enterprise.resource.webcontainer.jsf.lifecycle] (http-localhost/127.0.0.1:8080-1) Exiting RenderResponsePhase
10:54:05,830 FINE [javax.enterprise.resource.webcontainer.jsf.timing] (http-localhost/127.0.0.1:8080-1) [TIMING] - [12ms] : Execution time for phase (including any PhaseListeners) -> RENDER_RESPONSE 6
10:54:05,831 DEBUG [org.apache.catalina.core.ContainerBase.[jboss.web].[default-host].[/mps-admin].[Faces Servlet]] (http-localhost/127.0.0.1:8080-1) Disabling the response for futher output