I call EJB's from a servlet with a <run-as> tag. Inside my SessionBean I call isCallerInRole('run-as' role) and get false. Is this correct? Is the 'run-as' role not added to the caller's roles for the duration of the call?
Clarification of what is supposed to happen would be useful.