Hi,

I am new to Picketlink. I would like to create a group called 'staff' and then assigned it with 'create-article' privilege. Afterwards 'john' user are added to 'staff' group. But when I log in as 'john', I don't have 'create-article' privilege?

This is what I did:

1. create 'staff' group:

    Group staff = new Group("staff");

    identityManager.add(staff);

2. create 'create-article' role

    Role roleCreateArticle = new Role("create-article");

    identityManager.add(roleCreateArticle);

3. Assign 'create-article' to 'staff'

    BasicModel.grantRole(relationshipManager, staff, roleCreateArticle);

4. Create 'john' user

    User john = new User("john");

    john.setEmail("john@panemu.com");

    john.setFirstName("john");

    john.setLastName("Syadzili");

    identityManager.add(john);

    identityManager.updateCredential(john, new Password("john"));

5. Add 'john' to 'staff' group

   BasicModel.addToGroup(relationshipManager, john, staff);

6. Check 'john' privelege after login

    Role role = getRole(this.identityManager, 'create-article');

    boolean result = hasRole(this.relationshipManager, this.identity.getAccount(), role);

Why the result is false?

Thank you